It was an offline multi-sig wallet. Hackers seem to have musked the transaction when the owners signed it as it looked good to them.
It’s basically phishing at a transaction signing level.
I only found the term a few weeks ago and thought I was the one left out, sorry for not defining it earlier.
It’s got an eerie ring to it though, right?