After buyin on uniswap with card, I got immediately drawn the found and redirected as gas fee the whole amount

The issue is My metamask phrase has been compromised and funds are transferred out. Please help

The issue is My metamask phrase has been compromised and funds are transferred out. Please help

three days ago my metamask wallet was suddenly drained and I lost alla the eth. I don't know if it's my fault for clicking some shady link or something else, a friend of mine helped me look up the transaction on the blockchain and apparently it happened completely without my consent or direct interaction with the wallet itself.

I received a message on Twitter claiming that he was an employee of Fabric Ventures, and that they were forming groups of around 10 people who are knowledgeable in Crypto and Web3. They were allegedly meeting twice per week discussing all crypto related news, sharing experiences and researching Web3-related investment opportunities. He explained that my profile fit their requirements and I was requested to join them in an interview to determine whether I am eligible for hiring in their groups. He then shared a meeting link with me for the interview. Before installing the X-call.app software, I already had suspicions and decided to scan the installer using virustotal.com. The scan results were clean, and I proceeded to double click the installer. The installer seemed to download files for installation and was showing me ads for interesting features like live AI voice translation. An error showed at the end of the installation, and I quickly started scanning my computer for malware. 11 threats were detected, and no matter how many times I delete/quarantine the malwares, they keep reappearing upon device restart. It is only a few hours later that I discover that my wallet has been drained. A few days later, I received alerts from Google informing me that suspicious activity has been detected on my accounts (as shown in the screenshot provided in the evidence).

He send my ballance automatic to his address wallet april 22,2024 at 5:37am

I checked by uniswap wallet and somehow all of my BRETT was sent to the address above, even though I never approved it and did not have any connections to my wallet. About a month ago, I accidentally clicked a malicious link for a "GPU airdrop" and the wallet transferred all of my BRETT at the time ($200 worth) to their wallet, but I do not remember if it was this wallet that just stole all my BRETT this time.

Wallet is drained, but only early in the morning around 3/4 am EST.

On March 19th, my Robinhood account was hacked into. BTC and ETH was bought, sold, and transferred to an unknown wallet. Someone unknown was able to access my Robinhood account and transfer my funds while I was locked out of my account.

Swepper bot,look at image.

hack of my privacy ledger cold wallet i don't know how. the Total is in euro not in dollar

Presumed Wallet Drain? Or? Compromised Address: 0x03711d6fd82e2625c0aa8badea2a96e4f740ac2e https://etherscan.io/address/0x03711d6fd82e2625c0aa8badea2a96e4f740ac2e With the intention of spinning up a Rocket Pool validator mini-node, I deposited ETH and RPL into Compromised Address provided by Dappnode-RocketPool app. The previous day, I attached the Compromised Address to a Guarda Wallet, providing my 24 word mnemonic phrase to set the wallet. This could have been the point of compromise, but I ran checksum and it produced a valid result. The next day, I sent 16.5 ETH plus 184 RPL to Compromised Address. Within three minutes, ETH was moved without my authorization or action to Attack Address: 0x79a2620339dDb1368eED07F77beEf963c7208C27 https://etherscan.io/address/0x79a2620339ddb1368eed07f77beef963c7208c27 At same time, RPL and a small amount of ETH for gas was moved from Compromised Address to Attack Address 2: 0x48c2eE013aA3DA4021DFA552314d2F5c2eAb2810 https://etherscan.io/address/0x48c2ee013aa3da4021dfa552314d2f5c2eab2810 Then ETH was moved from Attack Address to Intermediate Address 1 0x03b33AB47AEEf702b23D6067487a73e4e2549215 https://etherscan.io/address/0x03b33ab47aeef702b23d6067487a73e4e2549215 Then 12 hours later both ETH and RPL tokens sent from Attack and Intermediary addresses to Destination Address where they remain at this time: 0x3100F73561dE17A340ce4D35E5f2Bcc6e40da0bb https://etherscan.io/address/0x3100F73561dE17A340ce4D35E5f2Bcc6e40da0bb I do not know the identity of the Destination Address and have been told it lies outside of the Rocket Pool protocol. NB: The other address which recently funded a similar amount to the Destination Address is: https://etherscan.io/address/0xc59459009899982668671e797e28844207ec22c2

IN DATA DE 15.04.2024 DIN CONTUL MEU BLAKFORT , DIN METAMASK , AU DISPARUT 15.270 BXN , RESPECTIV 11000 BXN, A CAROR VALOARE TOTAL IN EURO ERA IN ACEA ZI DE 741,73 EURO.....CONTUL BLACKFORT ERA LEGAT DE METAMSK.. ERAU 2 CONTURI SEPARATE ,BLAKFORT... UNUL PE NUMELE MEU , STERIANA NIRLU SI UNUL PE NUMELE BAIATULUI MEU, ALEXANDRU EMANUEL RAITA... AMBELE CONTURI LE GESTIONAM EU... ADRESELE DE METAMASK SUNT IN ACELASI PORTOFEL CU ADRESE DIFERITE ACEASTA E ADRESA MEA DIN METAMSK 0x2E74b5386E36Ae38c546819bdB151A5d0C20a173 ACEASTA E ADRESA BAIATULUI MEU DIN METAMSK 0x88185E63F7E5cAb5B19E92FC8DD98c737295a352 SPECIFIC CA NU AM FOLOSIT NICIODATA METAMASK PE SITE_ URI PE CARE NU LE CUNOSC! NU ARE NIMENI ACCES LA TELEFONUL MEU... CUVINTELE SECRETE LE AM SCRISE PE HARTIE! CHIAR NU STIU CE S-A PUTUT INTAMPLA! P.S. DATELE IN CEEA CE PRIVESTE TRANZACTIA LE- AM OBTINUT DE LA SUPORTUL METAMASK ... TOT EI AU FOST CEI CARE V-AU RECOMANDAT PENTRU SOLUTIONAREA PROBLEMEI!

This is a fake "Free Gift Card" method that essentially involves the website G2A.com, a website that is used for buying games and CD keys, however the provided userscript injects the hackers Bitcoin address into the G2A payment platform, and the "Free Gift Card" method suggests paying in bitcoin, and once the payment is done, the userscript will refund the amount, however, the bitcoin instead of going to G2A.com for a game, goes to the scammer/hacker. The code shown is obfuscated however deobfuscating it provides the BTC address attached.