We want to provide clarity regarding the unauthorized and ongoing access and movement of assets from users of MyAlgo Wallet. MyAlgo is a third-party wallet provider, not directly associated with Algorand Inc or the Algorand Foundation. The Algorand protocol has not been compromised.
It appears that this is an ongoing attack and all MyAlgo Wallet users need to immediately move their assets out of wallets that have interacted with the MyAlgo platform. Users should withdraw funds to, or rekey to, newly created accounts outside of MyAlgo, or to a hardware wallet.
Please find below a few tutorials to rekey on other wallets:
1) Rekey your wallet to a new wallet on @PeraAlgoWallet app:
https://twitter.com/PeraAlgoWallet/status/1630991666814353410
2) Rekey your wallet on @PeraAlgoWallet web app:
https://twitter.com/PeraAlgoWallet/status/1630284001561681920
3) Rekey your wallet on @deflyapp app:
https://twitter.com/deflyapp/status/1630576504424783872
We will continue to monitor the situation.