Can just someone tell me how the hacker checks for incoming transaction and sends it as soon as it gets 1 confirmation??
Also, its happening only on some addresses in the wallet.
It can not be moved with only 1 confirmation. Either the transaction was invalid, and from an orphaned block, due to it being fake... and returned back to the sender, or deleted if a double-spend... or you are not seeing that it actually had 6 actual confirms.
I can hack a block and it would show in your wallet... for at-least one-confirm... but as soon as the system sees it is fake, it removes it. Thus, it never made it past 6 confirms.
Where is this money coming from? The money you are seeing entering your wallet? If you are placing it there, then you should be worried. If this is from some automated payment system, you need to contact them to let them know the payments are not going through.
How does anyone see when you have money in there... simple... they just look at the block-info that you see. It is on everyones computer, and on that site, for the world to see.
Again... BTC can NOT be withdrawn by ANYONE if it was not validated (6+ confirms), unless a whole branch of fake transactions occurred on a block that was recently thrown-out, due to being invalid. (Thus, it was never your BTC to begin with. Thus, not a loss.)
If this was payment for something, you should wait for over 30 confirms... (120 to be realistic), before "accepting it as valid". People use double-spends and hacked blocks to fool automated systems. Those transactions do not survive 120+ confirms, unless a 51% attack is successful. No-one has 51% of the mining market.
What the? That's a lot of gibberish and false information. I can't tell if you are intentionally trying to cause confusion or if you just have no idea what you're talking about.