I'm confused. You say the wallet has been empty since 2022, and the phishing attack just happened a few days ago. Obviously the phishing attack can't go back in time two years to take your crypto in the past ;p

You say "That would be me, not them". So you already know the answer. So what is your confusion?