This has happened to me, it was an attack that was trying to get crypto private keys (ethereum)