I ran a sketchy setup.exe on my pc (yes, I know) that contained infostealing malware.

I ran a sketchy setup.exe on my pc (yes, I know) that contained infostealing malware. Windows Defender instantly began sending notifications.

A few hours later my hyperliquid wallet containing 410 USDC was completely drained (and my discord was overtaken and sending spam messages to all my contacts).

I assume they captured the active session cookie/token from my Chrome browser and used that to duplicate my running discord and hyperliquid session.

I am a bit amazed how can just initiate withdrawals on Hyperliquid without any form of confirmation needed from me.

The 410 USDC is now sitting in a random wallet: https://etherscan.io/address/0xa77db8017f1cd99b13f12d046e109eb5fee14316#crosschaintx

Hash: 0x8d3154e0d136f5128eab04466e264902023600c66c3a13e430fa0033903acefd

I consider this money lost, but was wondering if anyone has interesting insights as to how this has happened.