I think there's something wrong with the offer.
They should not ask for your password.
It's ok about your portfolio id but the pw. Nope.
That's why their offer is so attractive that individuals might ignore their requirements.
You need to dig deeper before you willingly give to them your info.
So even after changing the password and securing it, 2fa are able to steal my bitcoins? Apparently, the password and wallet id were needed for configuration. Now I change the password, I secure my account and I should transfer bitcoins - but there is little fear left.