I have been robbed after dust attack
The transaction taking the coins is very strange, the criminals have obviously got a strategy which requires the multiple denominations of UTXO's. It's not clear what this is but regardless the TXID showing funds being stolen is: de991dda2cd10a31bea1dd92c5e5466f916b060f5bd31fe0840b9fd08a0aa786
If you follow one of the outputs you can see via the following transactions that it moves to an address: 169ksrn7RgXFZmUVtvBFfbEKG5mmMxvQU7
TXID 1: fa53e39eb02809ea03986484325141d7e97c8a9b8c793974841b6850be43cd70
TXID 2: 177b996bdf4c2986faed0830a064242e553a8d914b0d7771561d5a017e2eca3e
This address resides in a wallet clustered under the following reference in walletexplorer.com:
https://www.walletexplorer.com/wallet/00011cbc1c9321ec
When you review the activity of this wallet there is a lot of receipts and only one daily transaction out of the cluster to an address attributed to Binance (for the several days at least). No other exchange or entity is mentioned as an output. Given this my thoughts would be this is a hot wallet associated with Binance. As such if you have any contacts at Binance I would getting in touch with them.