Scammers have been connecting to Phantom wallets in an attempt to lure users with a fake update extension signature request.