First of all, why anyone would go and copy the destination address from a previous transaction for their new transaction, especially when such high amounts are involved, is beyond me...
TransferFrom Zero Transfer Scam they INITIATE OUTGOING TRANSACTIONS FROM OUR WALLETS!
Smart contracts can initiate an outgoing transaction from your wallet
ONLY if they have been previously approved by the owner. The TransferFrom() function cannot fire a transfer event if it is not approved unless the token amount transacted is equal to 0. If you fail to understand this, it may lead you to believe that anyone can initiate a token transaction from any wallet - which is not true.
The transferFrom() function transfers the tokens from an owner's account to the receiver account, but only if the transaction initiator has sufficient allowance that has been previously approved by the owner to the transaction initiator. To transfer the tokens using the transferFrom() function, approver must have called the approve() function prior. As per the standard, the transferFrom() function must fire the Transfer event upon the successful execution and transfer of tokens. The transfer of 0 (zero) value must also be treated as a valid transfer and should fire the Transfer event.