Comment by jimktrains2

This isn't really an attack, is it? I mean, the money still gets from who it's suppose to get from to who it's suppose to get to?

It's only an "attack" if your wallet software doesn't validate against the recommended (iirc: to_addy, from_addy, amount, time-in-tx), correct?