A user downloads what appears to be the official Monero wallet installer, sees a professional interface, completes the installation wizard without errors, and begins managing XMR holdings. The process felt legitimate because the visual elements matched expectations: a polished window, standard dialogs, a familiar installation path. Weeks later, the wallet is already compromised. The installer…