A fake Ledger Live app on the Mac App Store duped more than 50 users, swiping more than $9 million in a new crypto scam.