Wow that really sucks, yeah it seems that you gave some dapp access to your active key perhaps?
Check SteemConnect and remove access for everything?

Maybe ask for advice on the Steem or Steemit telegram channels, they're really active.