Etherscan: Taking the example of Ukrainian fake airdrop tokens, discussing the implementation methods and prevention measures of deceptive tokens
To dig deeper, look for the deceived From address in the transaction input data or contract source code.
