Unsurprisingly, the attack site joinmarket DOT net is succeeding in stealing people's funds (at least one person reported having their wallet swept).

Reported it to Google literally years ago (me and one or two others at least).

Nothing happened. Any ideas or actions welcome.