Its a kyc nostr client that tricks you into putting in your nsec key and now they have access to your nostr account