Yeah, it should be malicious smart contract or just malicious website. Malware has a different meaning. Regardless the name it will still steal your funds if not carefully secured your device. Btw Sorry for the loss.
Haha. That was expensive for me, but a lesson learned. I used to give advice to people about how phishing works and that they should check the URL twice before they connect their wallet to a website. But my smart ass did not want to follow what I suggested to others, and I went ahead to connect my wallet even though I was sleepy and on my mobile device when I did that.
That was actually stupid of me. But I have learned a lesson. This actually proves that no matter how experienced you are, you could still fall for scams if you become careless while surfing the internet. That happened because I was confident that I won't fall for these scams