yeah the major vulnerabilities that allows this is to happen is CVE-2025-31702 and CVE-2021-33044/CVE-2021-33045 , seen how its done so i know, TIGOS idea of creating accounts using those trolls accounts is good if you want to still use p2p, might be wort a shot.