New phishing bot steals MetaMask passwords