A recent phishing campaign targets MetaMask users by mimicking two-factor authentication (2FA) prompts to deceive individuals into revealing their wallet's recovery phrase.