Attacker behind a fake HitBTC website might have stolen $15M worth of crypto from multiple scams and phishing attacks