On February 21, 2025, when copyright employees went to approve and sign a plan transfer, the UI showed what appeared to be a legit transaction Using the supposed location. Only once the transfer of funds into the hidden addresses set by the malicious code did copyright staff members recognize something was amiss.The interface on equally the deskto