Is it possible his account got hijacked by using the software itself? I know with a lot of online games like Warcraft, people get scammed into using software that are hosting a keylogger. Said people might get what they were after, but then they get their accounts taken over.
If this software modifies the amount of achievement points someone has on an account, then surely one would have to input their account information to do it right? I mean, Candy or anyone couldn't just use that software to add points to my account without the username and password. So it's really not outside the realm of possibility that he could have used the software to cheat (not saying he did, just looking at this from the outside) and then the hijacker got the info from the keylogger and took over the account, sending us the message.
Good model. Give the user what they want (in this case, the points) take the account, send the message to all his friends, people who would normally trust the user, get more accounts.

Comment