The new active phishing attack is trying to steal Trezor users’ crypto by tricking investors into entering their recovery phrase on a fake Trezor site.