I have been saying this for years, but you guys really need to do a few things.When it happened to me I was using proton. And the hacker was using..... My proton. After sendimg opti bitcoin and address info, the hacker sent opti an email from my end asking for a different delivery address and recipient.
After complaining that I hadnt got a pack in however long it took, opti sent me the email thread. Fucking sucked
1. Go to settings and turn on 2fa. Use Authy, or similar program to manage 2FA
2. Go to settings and turn on the 2 password feature for proton. It is a little more work, but provides a second layer of security.
3. Use UNIQUE strong passwords for every site/email account. Don't reuse passwords, and don't use simple passwords. Use a good password manager to generate random, strong passwords, for everything, and use 1 strong password, you need to remember to access password manager.
Common theme is "hackers" breach a forum, or online store, and people used the same damn password for their login, as their email.
4. Don't click links in emails. No matter what. Just assume any link, or attachment is malicious, and don't click it.
This hacker actually did in reverse of what normally happens. Normally they breach your email, redirect incoming mail so you never see it, and change the BTC address(or act as the source) a source gives to their own address. Then customer emails a couple days later asking if their order is coming, yet source never even sent a payment address/or received payment. Surprised this guy actually rerouted GH somewhere. That is weird lol