Hi, to anyone is coming across this, a group of individuals have come together hoping to reverse engineer and disable these scams as soon as new ones come up (they phone home using discord webhooks which can be disabled remotely). We are cataloging our findings on a public wiki. If you have come into contact with a compromised account or have been sent malware, please forward it to us so we can hopefully break it open and render that build inert.
You can learn more or help stop these here: ⭷ https://security.shulker.net/wiki/Main_Page
Shoutouts to: GlitchyPSI, PhleBuster, Vixus, Kibbles, and everyone else helping out!