Crypto drainers as a service: What you need to know

These scripts execute when you connect your wallet, silently triggering approval transactions that drain assets.

like without even signing anything? is that possible?