The moment they'd entry to Safe Wallet ??s procedure, they manipulated the consumer interface (UI) that clients like copyright personnel would see. They replaced a benign JavaScript code with code built to change the meant destination of your ETH inside the wallet to wallets managed by Nort