Password-stealing malware is being spread by hackers through NFT airdrops purporting to be Solana Phantom security updates.