Unsuspecting HitBTC users have lost $15 million in BTC, ETH and other cryptos to a phishing scammers since June last year.