Blockchain security firm SlowMist has identified a phishing scam targeting MetaMask users through spoofed “2FA verification” emails. The fraudulent messages direct victims to fake security pages that mimic MetaMask and prompt them to enter their seed phrases, leading to asset theft. SlowMist emphasized that MetaMask never requests seed phrases for verification and urged users to remain vigilant against such unsolicited prompts.