some potential areas to consider - used a VPN service that was malicious - router is compromised - someone near you was running a MITM device like Stingray (as

some potential areas to consider - used a VPN service that was malicious - router is compromised - someone near you was running a MITM device like Stingray (assuming you were using a mobile device away from home) - mobile device had unpatched OS (exploit gains root access via something like binary sms) - your desktop / laptop is compromised