When they had use of Protected Wallet ??s method, they manipulated the person interface (UI) that consumers like copyright staff would see. They changed a benign JavaScript code with code built to change the intended place in the ETH in the wallet to wallets managed by North Korean operatives.