Did you happen to download an infected copy of bitcoin-core? Specifically, check the PGP key of the downloaded file?
I have not come across one yet but it is certainly possible that some no good fraudster is using a modified bitcoin-core executable and stealing people's money.