RE: If you use Metamask without a hardware wallet you may be at risk.
It has everything to do with metamask as the phish is acting as a legitimate version of metamask.
RE: If you use Metamask without a hardware wallet you may be at risk.