Can someone explain how this scam works in more detail? In the article it said seconds after the person logged into the fake app, the BTC was gone. So did the

Can someone explain how this scam works in more detail? In the article it said seconds after the person logged into the fake app, the BTC was gone. So did the scammers automate this then? Scraped the login details and then automatically logged into the real platform and transferred the BTC out? What about 2FA? How did the scammers get around that? Also, the article mentioned you can change your app after you submitted it to the Appstore without requiring another approval? i.e. did they change the logo without Apple noticing?