In terms of computer security features specifically from the electrum, it is impossible for them to compromise your funds and take it away unless the problem relies on your system it self, the only safe storage I know is the hardware wallets where the private keys are hidden, because basically using other software where you could see your private keys will expose it, malware could probably screen capture your monitor and if they see information about your wallet then, that is the vulnerability you need to consider.
well maybe his computer has been infected with various viruses and maybe he has logged into an improper site or phishing and maybe he has also installed various add ons where there are many gaps that can be used to get a lot of data stored in his search engine, so it's better when it happens like that then reinstall your computer and backup all the keys that you think are important.
All the keys that I had the opportunity to see go to the trash! I ALWAYS use the latest Chrome to browse the pages, and in addition - every time in incognito mode ... From plugins I have only ABP and WebRTC ... Ultimately, I remove even basic garbage from Google such as sheets, offline documents, etc. ... is undermining your bad luck. I am so experienced with Internet users that no phishing is possible. As for advice on not keeping large sums on hot wallets and exchanges - I AGREE ... I just remind you that it was the receipt of funds intended for payment to the stock exchange ... these funds disappeared after two confirmation of the payment transaction, so it was not "holding means "= no part of this knowledge would be applicable here ... although I believe that the less experienced thanks to this knowledge will protect their means against unauthorized hands.
As for the case itself:
Until now I haven't got the answer what really happened.
I know that no one in my computer personally rummaged because there is nobody [even in my absence]. The review of event logs in Windows also did not show any suspicious activity. Hash Electrum from the official website is consistent with the hash of the version used while I lost funds ... two conclusions can be drawn:
- a Trojan not yet detectable by anti-viruses has been used on my equipment
- the official version of Electrum is leaky
There are no more options.
In general, for readers who want to avoid adventures like me - I recommend from experience - (if you haven't already done so):
- check your computers regularly for viruses
- if you use the addresses generated in Electrum / by any site / BrainWallet / and have seen at least once your private key assigned to your wallet -> abandon them immediately and transfer funds to your hardware wallets. I personally had Trezor in my closet all the time, because I got it from the stock exchange for trading, but I didn't use it because I didn't see such a need ... oh, I regret it!
- ALWAYS install system updates from Microsoft if you use Windows!
Regards