I’ve never seen a scam like this before. How did this happen?

Here’s the token below:

https://bscscan.com/token/0xF8517d35119617f413845beC155D9D426d8Cca39

It’s a scam token, I know. But I was able to successfully purchase it and then the tokens, after one minute, were sent to a null address without any action by me.

How is this possible?

I’ve never seen a scam like this before. How did this happen?