There has been a lot of reports about Axies being gifted/hacked to the hackers account. There's a rotating fake ronin wallet app that's being published on Play store.
The official ronin wallet isn't on playstore or any application store where you can download it. It's only available on their very official website, don't download any of those but only to the official source.
Yes, because in the first place they already downloaded the wrong link of ronin extension, some of the users who were excited to create their accounts didn't notice the difference between the original an the fake domains, in other words from the very start they were already clicked the phishing site before they began to play the game.
Some of the users disappointed to google and blame it to them why they allow fake domains on the search function, that is why this hackers easily hacked their accounts.
I don't really know the process, but I saw it on a youtuber reveal how his account got hacked, he checked his browse history and saw the fake domains.