This is likely because the person unwittingly entered their credentials on a phishing page. This has been rampant recently. Check out:<br><a href="http://www.symantec.com/enterprise/security_response/weblog/2006/05/im_phishing_threat.html">
http://www.symantec.com/enterprise/security_response/weblog/2006/05/im_phishing_threat.html</a><br><br><div><span class="gmail_quote">On 7/11/06, <b class="gmail_sendername">Morning Wood</b> <<a href="mailto:se_cur_ity@hotmail.com">
se_cur_ity@hotmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">> Describe the IM a little further.<br>><br>
> Receiving garbage in an IM message isn't new, and is commonly sent to<br>> everyone in a chat room via a chat-bot. The IM commonly contains URL<br>> hyperlinks to either a gambling site, or a porn site [webcam,dating,etc].
<br><br><br>the person who sends you the IM is YOU<br><br><br><br>_______________________________________________<br>Full-Disclosure - We believe in it.<br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">
http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/">http://secunia.com/</a><br></blockquote></div><br>