The easiest way to get hacked in crypto is to "google" a website, click the fake as fuck link up top, that did SEO or paid per click to get there. Then connect your wallet and lose all your money. For some reason, people are pretending there's another way to do it. Some type of magical signing hack, lol. Like, bro, if there was someway to actually spam bullshit hacks transactions into peoples wallets, people would be losing their money far more often.
There's no way to magically "inject" bullshit, scam transactions into someone's wallet, but for them connecting to a bad dapp.
The only other, barely hackish way, is or someone to watch fake, scam transactions hitting their address in a block explorer, and just straight up send the fake address money.
I'm happy to learn. Am I missing something?