so it's either a malware or you reused the password at somewhere where you shouldn't. shows how important to have a good anti-virus running 24/7 and enabling 2FA in every site that offers it.