One thing you should always keep in view, is which website you are clicking on or currently visiting. In the past, there were many fake ads on google with fake pages that even copied a exchanges. If you entered your password there, your coins were quickly gone. There was no two-factor authentication or other security things at that time. So always check where you are surfing and which links you click on.