Fake MetaMask 2FA security checks lure users into sharing recovery phrases January 5, 2026 by kamal According to SlowMist, attackers are impersonating MetaMask, aiming to steal users’ secret recovery phrases.