Fake phishing somehow sending fake tokens from my address?

Not going to list my ether address but I have experienced phishing attempts before on addresses where a very similar deposit address sends me a small sum in the hopes of an inattentive copy paste.

But today I noticed something new, two transactions on etherscan that show my address sending some fake USDT contract to an address I deposit into..one of them got greyed out on etherscan. But the second one wasn't. How is it possible for a scammer to send a 0 value transaction from my address?