Check Point Research has discovered a “massive” phishing campaign that has seen funds stolen from MetaMask and Phantom users.