In Ethereum it would be implemented by overriding your account with a smart contract, the approval of which is exactly what they signed here (only it wasn't a multisig smart contract, it was something malicious).