For you to recover your fund, you will need either another bot faster than the one installed on your wallet (this depends on the amount you have in that wallet, as those bots aren't cheap at all), or if the bot gives a little space before it could move out your fee, then you might just need some extra hands, one of which can serve as the gas sender and the other as the token sender.
I'm curious though, are you sure that's what you have? I would imagine that in order for this to work, the attacker would need your private keys/seed phrase, and you can't just get it by linking your address.
I believe the OP gave more than just their address; by connecting their wallet to most of these suspicious Dapps, or whatever they call them, they will at some point grant the site some sort of total access to their wallet which phrase and private key can be extracted without the user's notice.
