@surfermarly Very sorry to hear about this happening to you; but thank you for posting about it.
It's a wake up call for everybody.
Your post reminded me about McAfee's lecture from some time back. (Though he still talks about this occasionally today.)
John McAfee wanted something to be done about this sort of thing years ago. Create tools so that ordinary users who are safer from predators. It is something the community urgently needs to do.
He said at a presentation that he loses tens of thousands this way every month.
You gets tired at the end of the day. Then you put in the wrong place the wrong key. And lo! the thieves get the key. In seconds.
They can do worse than in your case; they don't empty at once, they wait until many wallets compromised, and until sufficient amount in them, then empty them all at once so no user can warn other users like you just did.
The guy in your case was smart enough to write the bot, but not that smart. They emptied at once. Whereas what if they waited until a big post was rewarded? Or the user powers down to transfer their stake.
Scary. And appalling. Many commentators have noted above that 18 SBD is a large amount to some persons elsewhere in the world.
If smarter thieves show up that could be a major problem, something needs to be done about it.
McAfee said he would fund tools that solve this problem for the ordinary, tired and busy user, the problem of safety when transacting. It's too easy to make a mistake that leaves your account empty. This retards mainstream adoption of blockchain and graph technologies, even if they are the future.