I am sorry, but if a random guy messages you and says that he will give you free money, and all you have to do is give him access to his wallet or download a file, and the victim does it, then the victim deserves to be scammed for lacking common sense. At least that will teach him a lesson. It might be an expensive lesson, but the next time he wont fall for it. Look at most of the scams. They are all obvious. It is just greed that makes them stupid and get scammed.
A recent example is Bitget releasing a couple of articles to inform their users about phishing and a particular malicious browser extension named "AggrTrade". I've seen similar notifications from Binance, bybit also telling their users to be careful
Never download any extensions that you don't trust. Extensions are the most common way to hijack someone.
What have you guys been doing to keep your assets safe though? Drop some comments, let's learn.
Using brain and thinking twice before any I take any action.