A fake MetaMask Governance token surged by 2600% before getting rug-pulled, scamming hundreds in the process.