OG wallet finally got compromised, unsure how; have checked many aspects on my end, and somehow looks like a middleman or external application exploit. Either wallet backups are being turned on and hijacked or previous approvals are somehow being used to initiate new ones. The network and devices were clean as well.

I think, therefore I am. I create, so I am created. I discover, thus I am discovered. 

hismajesty.eth

Rescued all // cards and a few other things, manual drain hit the big things but luckily not everything.