Just a little note here - The @eds-pay account you have listed as a possible victim, I don't think is compromised. It pays dividends weekly to holders of EDSI tokens. The account in question held EDSI (that it received from @drlobes listed as a victim) at the time dividends were paid. The wallet @bunker.hive then sold the EDSI and has not received divs since.

So, to summarize:

• @eds-pay not a victim or a scammer.
• @drlobes - victim
• @bunker.hive - ...

Thanks for drawing attention here, and this example shows that on top of the HIVE and HBD, there is likely lots of H.E. tokens also involved.