It was a phishing effort targeting unsuspecting customers. The bulk of the stolen funds are still sitting in Monkey Drainer’s