In the past few weeks I have seen a lot of fake websites that look like steemit with the goal of stealing the passwords.
Your friend probably visited one of those websites.
Which one is the account receiving the stolen funds?
You are viewing a single comment's thread from:
Seems she was not clicking any phishing link but who know - the receiving account I reported to steemitabuse and prefer not to mention here - I might do later maybe as he seems to have found another victim.