Hacked for 2nd time in a week!

Obtained hacked once more!!! Don't trust Google Authenticator!!!
(Earlier hack story right here: https://www.reddit.com/r/binance/comments/1pc8xpe/had_my_binance_account_emptied_by_a_scammer/)

Hope my experience helps any person else from dropping money.

After changing my passwords on chrome / google / gmail / binance and un-synching them, checked for any unusual exercise (there wasn't any) and so forth and establishing face scan on google authenticator, I added a a number of hundred $ to my binance account to test it, and it was stolen inside hours while I used to be logged in watching it occur.

I obtained logged out, and could not even open binance on browser to log back in, stated web page unavailable so I could not disable the account or notify them of a hack or freeze account!!

Tried on telephone however it instantly logged me out.
Managed to report the hack in offline mode on telephone however by then 8 x $30.99 transactions had gone out.

What is worrying is I by no means acquired any emails from binance requesting approval like I do once I make a withdrawal and the way did they handle to make use of my google authenticator when I've face id on it to open it????

To get into my binance account you needed to:
Log in with e-mail and password (which was new and not synched to Chrome)
Use the code sent by e-mail
And Use the code on Google Authenticator (which is locked with google face ID every time you open it)

However they nonetheless received access!

I additionally don't see any unusual log ins or anything strange like mail forwarding, API's to any of my accounts or chrome.

I've ordered a Yubikey and will only use any finance / funding apps on PC (and a brand new spare telephone) at residence on wired internet as I feel that is the only approach to be absolutely protected and a spare telephone.

Type of glad it occurred now and not once I had a huge amount in my account.

I'm still confused on how this might of happened as it's exhausting enough for me to log in and go through all the authenticating processes to make withdrawals, very pissed off!

Keep protected guys