Once a user receives an unsolicited token, a plaintext "memo" field appears in the transaction. The memo field is independent of the wallet used to manage cryptocurrency, making it a universal attack vector.