1 article on this topic.
Unsolicited tokens arriving in a wallet are not a gift. They are bait, and interacting with them is the attack.