My Mac was infected with a malware trojan distributed through pirated technical software. The malware exfiltrated the private keys of the Ethereum wallets I manage with the Rabby browser extension, which were stored in plain text on the same machine. In the evening of 22 September 2026 the attacker used those keys to drain every wallet I controlled, moving all the funds into a single consolidation address created earlier the same day. Part of the stolen assets was converted through an instant-exchange service and sent back as ETH to that same consolidation address. The malware was later detected and quarantined by antivirus but not removed, and is preserved on the machine. I have filed a criminal complaint with the Italian police, addressed to the Public Prosecutor's Office in Milan, and the case is being handled together with the SEAL 911 incident response team, which has already flagged the consolidation address to its compliance partners.