I don't know much on technical side and don't have any 100% proves, but I currently work in big ICO project and we receive dozens of messages from the users who tried to use etherdelta and then got their MEW account data stolen.