One of my guildies notified an officer stating that someone else in the guild has acquired his password. The guildie (lets call him g1 for simplicity) states that the other guildie (g2) somehow forced g1 to /w his username and password to g2. Initially that reminded me of the old Starcraft and D2 “hacks” where you are told by someone “you can check your all-time stats with the dnd command”. This was ruled out due to g1 seeing his message go to g2. Anyone that has uses /dnd knows that you don’t see your dnd replies. I am aware of packet sniffers as a possiblility, but i really don’t see how this would apply here as the info came from g1. The only thing I can think of would be some type of addon that gives someone else a player’s acct info when someone else types in a certain command. I have seen auto replies in addons that contain dkp info, list of enchants, profession goodies, etc. so I imagine this would be possible. I’m not looking to do anything like this, but I want to know if any of you out there have seen something like this before, and what course of action needs to be taken for individual g1. Hopefully he has already changed his pw. But one last thing to note, he doesn’t use many addons… so that may bring this all back to square one. Any Ideas?

And for all those flagged for /lazy, the TLDR version

Guildie1: /g Hey ev1
Guildie1 to Guildie2 : my username and pass is uname///pass
Guildie1 to Guildie2 : WTF… I didn’t type that… how did you get my info?

I can't say I've heard of any such addon, Lashinrot, though I must confess that I'm uncertain how any program on one's computer would retrieve the password to a World of Warcraft account, as that is — to my knowledge, at least — not stored anywhere on one's system. The account name, if you've chosen to have it persist between sessions, can be found in the config.wtf file, but the password should be immune to such "queries."

Would you be at all willing to offer the name and realm of the affected character, and an approximate timeframe during which this occurred? :)