Would that password have also worked on his PGP Keybase account as well?
Neh, mah PGP key had a different password.
- Why wouldn't the "hacker" just send the btc away individually as he got control of each of them over time?
Maybe he just got the privkey of mah(not the password) wallet & he did import the privkey in his wallet & then used all his addresses as the input address.
Why would he do that? Why not send it out from your wallet from your computer?
How would he have your private key and not have control of your wallet?
Why would he intentionally group it with other scam addresses, thus creating linkability?
Have you determined how this "hacker" had performed this feat yet?