Dude, its a pishing attack ban, labbe AI මගුලක් නෙවී, Idiots click some phishing link, surrender their password and then the attacker has access to the emails. Once that part is done he just crafts the email putting their own bank details to make the transfer. This could have been easily avoided...