::
Your friend downloaded a fake wallet and gave the scammers his seed phrase. Then, they took all his funds.
If you have to enter your seed phrase to update any wallet, get support from a „DEV“ or simply anywhere that you’re not purposely trying to access your old wallet, it’s a scam.
Browsers could do a helluva lot better in protecting customers but I could easily play devil’s advocate to my own arguments and tell you why they won’t.