Security firm SlowMist warns of a new MetaMask phishing scam that mimics 2FA verification with fake countdowns and “authenticity checks” to trick users into entering their wallet recovery phrase and drain their funds.