On February 21, 2025, when copyright staff members went to approve and indicator a routine transfer, the UI showed what gave the impression to be a genuine transaction Together with the meant vacation spot. Only once the transfer of resources to your hidden addresses set with the malicious code did copyright workforce understand anything was amiss