You did a good thing, IMO. Also, having that exposed here in the Scam Accusations board would make others think otherwise.
If I have to be honest, prior to posting this thread and take a quick google search after it, I was divided between thinking if this is a serious offer of malicious software or is this an attempt to scam a scammer-wannabe, i.e.: offering a dud software. Sure, I've stumbled upon several people sharing their story of being hacked or warning about the possible hack through telegram, but this is the first time I finally "introduced" to the software and how it works; drain-ware, is what developers and cyber-security-analysts named them.
I think this software is not exclusively threatening newbies, inexperienced --or even experienced-- BM and those who dealt with contract-approval of web3 frequently are also at risk, in a sense that they might led into the trap in guise of escrow or NFT welcome bonus. Reading this article and from what can be inferred from the scammer's suggestion, one of the MO seems to be duplicating an existing platform, so even when people researching the said platform before they connect their wallet, they'll led to believe that the phishing site is legit as they shared the same name.