what hackers do is put a trojan in some junk mail which the user open, steal all the info about the wallet (address, password, etc) and transfer to 2 or 4 accounts in order to lose tracks.

This is something very common