I have seen the same method but with Tron MultiSign wallet full of USDT (TRC20), the victim send some TRX to move USDT but that's impossible because of the MultiSign