This looks like a case of malware. If it was an issue with the client then there would of been more reports of thieft.