A sophisticated phishing scam targets MetaMask users with fake 2FA alerts, tricking victims into handing over seed phrases.