Hi @ckeene,
I can confirm that from your description, it looks like you are a target of address poisoning attack.
Please, find more information in this thread: Has my trezor been hacked ?
You can find more information on address poisoning attack in this article: https://trezor.io/support/a/address-poisoning-attacks
Your recovery seed hasn’t been cracked and attackers do not have your private keys. If you will not send funds to the fake address yourself, they cannot steal your funds.