Fake MetaMask 2FA dey steal seed phrases via urgent email dem

One targeted phishing campaign dey pretend to be MetaMask to con users make dem reveal dia seed (mnemonic) phrases by imitating wetin dem call mandatory two‑factor authentication (2FA). Attackers dey send correct fake emails wey go pressure people say "Enable 2FA Now," sometimes with countdown timers and MetaMask branding. Links dey carry people go lookalike domains (one‑letter swaps like "mertamask") or fake pages wey copy MetaMask interface and ask make user enter dia mnemonic; once dem give am, attackers fit recreate and wipe the wallets. SlowMist don flag the campaign and researchers don report related fake app‑update scams. The campaign dey conceptually linked to recent wallet drains — for example the compromised Trust Wallet browser‑extension incident wey cause about $7 million loss. Even though industry trackers (Scam Sniffer) report say phishing losses don drop overall in 2025, criminals don dey shift from mass spam to low‑volume, high‑credibility social engineering wey use urgency, polished design, and trusted security concepts (2FA) to bypass user caution. Trader guidance: never enter seed phrases in response to unsolicited emails, check sender addresses and exact domains (watch for single‑letter typos), install extensions/apps only from official stores or verified sites, prefer hardware wallets for big holdings, and keep basic security hygiene (updated software, phishing checks, and separate devices for sensitive ops).