Warning: Funds stolen across multiple addresses – possible Ethereum exploit? I have the receiving address on Etherscan

A user reports their Ethereum account was drained without their action, with multiple addresses affected. Funds were sent to a specific Etherscan address linked to several victims. The user seeks help identifying the exploit and recovery steps.