Security researchers are urging cryptocurrency users to audit their browser wallet extensions after a fresh wave of phishing sites mimicked.