How do you figure it is nothing to do with Honorcoin when the Honorcoin website specifically asked for the Bitcointalk forum user name and for an email and a password?
Of course the 'game' would have been sent from a zero post account, do you think Honorcoin would advertise that they were spamming forum users with this?
So they try out the passwords they have been given on the forum and, when they work, they get to log in to other people's accounts. Otherwise they send a few 'games' out for testing to some of the other registered user names they have. They wouldn't send it to everyone because, again, that would make it pretty clear where it originated from.