This is a lesson I've recently learned after being scammed for 11 BTC by Torwallet.  Keeping your wallet offline seems to be the safest option!