Oh man. That's harsh.
I use keybase to manage most of my wallets, sending receiving, etc. You can manage all of your wallets from there and it's secured by your private key.
I haven't looked at StellarGuard but did a quick read over at Reddit in the SCF poll for the project. It appears to do what MetaMask does for Ethereum wrt phishing, bad actor sites, etc.
A VPN will do nothing for you - it only ensures e2e encryption, which you prolly already have at home by virtue of connecting to your home's encrypted WiFi, eliminating MitM attacks.
You can get a keybase account at https://keybase.io and it comes with a Stellar wallet by default, runs on *nix, Mac, and wYNd0z3, has browser support, built in git, chat, groups, everything encrypted, and much more.
The two separate transactions were a dead giveaway. Phishernen that steal CCs usually hit the card first with a five or ten dollar charge and then wallop your bank account with a second charge.
My condolences.
