Software used to access computers remotely has been inserted in a phishing website fronting as an NFT card game for the popular Pokémon franchise.