Short story. Hacker got my uncle to invest, I made my research after all the details found out the company is fake. But now the peopl involved sent him a LINK to downlos METAMASK. I believe maybe they also have access to the profile. Anyways. Help me out, how can I withdraw all of this without them hacking him or stealing it? Is this also how metamask looks like?