That's really unfortunate.  Intuit is certainly aware of this issue, but I was told that even though we are logged in, we should know that the help screen goes out to unprotected Internet where they can't be liable for what's out there.  Sounds insane and why they would allow external access through an encrypted financial software is beyond me.

I contacted my bank and blocked the charges.

Intuit, please fix your very obvious exploit point within your software. You know about it. Please fix it and please take legal action against the fraudsters.  Their website is: http://internalaccountingservices.com/