“This agent exhibits clear signs of automated fund draining, repeatedly sending large amounts of money to a single recipient with machine-like precision. The transactions occur in rapid bursts at regular intervals without human-like variation, indicating a likely compromise or malicious script rather than legitimate usage.”