0x7a1A66A63296ADf173F2241266ccDC8A71D99925 same as this address he did the theft of my altcoins, but I do not know which web has entered and I ended up even though changing my wallet address. like him we all have to be careful and vigilant. if you find anything suspicious.
0xa7a655CeB2dc36Cf987647357CC8AF1c30e5828c - my friend pamala
0x7a1A66A63296ADf173F2241266ccDC8A71D99925 - I don't know who that is
0x8c27736c3440e3d9f1c73f2b1ab03c2851ec6b05 - wallet that has 15 eth including pamalas
So its likely a phishing attack and lot of people fell for it, I can see that your friend is still using the address which got hacked so tell her to move any funds left in there as soon as possible with freshly created from a wallet which is created from other device which she normally don't use.
Money lost forever, its a lesson!