I was having some issues sweeping coins from my counterwallet and while searching for help I found a topic by someone who was having the same issue. The guy acted like he didn't know what he was doing and put both his public and private keys in the post. Checking out the wallet showed it contained 7.4 XCP and 1,000,000 egold (now defunct). The post was several years old and so I assumed it was forgotten about and tried to sweep the XCP (hey, it was just sitting there all those years...). I sent the BTC required for the transfer and as soon as the deposit was confirmed, the BTC was taken out. I tried once more before realizing what was going on. Instant karma. That's what I get for trying to steal somebody's 7.4 XCP.

It's clever. What is it just a script that checks for incoming BTC and takes it before it can be used by counterwallet? (I know nothing about programming)

I'm wondering if this only a new concept to me. I've only been crypto for a bit over a year. Have these been around? I can post the keys if anyone is curious - I didn't know if it would be against the rules to do so.