'I don't think that's possible since the transaction would need to be resigned by the hardware wallet (and that should be a huge red flag to any user).'

Unfortunately, this is possible as I stated in my article and I believe is it just a matter of time when we hear more about this kind of crimes.

Thank you for reading and commenting