I have been hacked once back on the steemit days, fortunately no malicious action took place on my account and recovered my access.
I have long chance the account recovery in both of my accounts, indeed trusting JS is like you tie a donkey in a lettuce.
Posted Using LeoFinance Beta