Perhaps you need to contact the developers and ask them a question they will answer and the situation will be more clear because here you will find only speculation and opinions of people, you are unlikely to help. Try to contact
support@metamask.ioIt is unlikely that it will help, without access to private keys, the attackers would not be able to steal funds from the wallet.
Is there a risk that hacker could do this by getting remote access to your computer on which you were logged into a metamask?