The moment they'd use of Protected Wallet ??s procedure, they manipulated the person interface (UI) that clients like copyright workforce would see. They changed a benign JavaScript code with code intended to change the supposed desired destination on the ETH while in the wallet to wallets