Those without a hardware wallet should avoid on-chain transactions for now.

It's uncertain whether the attacker is also extracting seeds from software wallets at this time.