Crypto phishing scam drains $600,000 from users tricked by fake airdrops