Why dont you use more reputable ones like electrum (for BTC), metamask (for alts), etc.
Just saw an article regarding exodus:
Cons: Easily Hacked – The Exodus software wallets can be easily hacked, and most users may lose funds if the device gets attacked by keyloggers or malware.

---

Do you have any balance in your wallet? Not sure why a zero value transaction occured in your case, but I'd immediately transfer funds to another safe address(controlled by me) if I suspected such activity.

---

Alternatively, just get a hardware wallet to store your precious cryptos.

Thanks for clarifying what happened. So in short, it's transferFrom function with Zero amount to any address and thus doesn't need pvtKey.

It is strange that scams evolve like this, but it is better to send an email to Exodus developers to fix such *bug*. All they need is to hide transactions with zero balance, just as explorers should do, so why wasn't such a solution implemented?!

There is no reason to do that. OP can't have his coins stolen in that way. Think about it: If a hacker/scammer had access to your wallet and could steal your coins, would they take everything you have, or would they make silly 0-value transactions? I am sure you know the answer to that question.

The scammers create similar looking addresses. They match in the first and last couple of characters. The idea is to trick the person into copying the wrong address from their transaction history instead of going about it the correct way. If you use the send/addresses/receive tabs the way they were intended, and not copy addresses from transaction histories or block explorers you would have nothing to worry about.   

It's written in Electron, which itself is just streamlined Chromium, so I'm not surprised by this at all.

Wallet software should be as small and minimal as possible to minimize the attack surface. That's why most wallets are written in C/C++ and Java.

There is an even better way. Don't copy anything from your transaction history when you are sending and receiving crypto. Congratulations! You have just upgraded your security.

The wallet or blockchain explorer could have a button to hide all 0-value transactions. That would get rid of this scam from popping up in front of your eyes. Blockchain explorers already tag these schemes as scams and malicious attempts. At least on Tron they do. 

I have no idea what they are planning. It's a bug or actually a feature of a network smart contract. Once such a contract is released, I don't think it can be taken offline. Tron isn't decentralized like Bitcoin, but you still shouldn't expect that someone out there would/should have the possibility to remove certain network capabilities they don't like.

Fraudsters are using those zero-value transactions as scam attempts, but there are surely other genuine reasons and use cases why such an option exists. Changing it could affect people who aren't abusing it. This is just guesswork btw.