Actually did you sign up at cannotlinkto or ffxiah.com and give any of your login info? Or did you download anything from them? These two sites are currently suspect in THEIR being hacked/having phishing/malware/spyware that is allowing people to get the logon info of the site's members.
Here is a link to somepage with a formal apology on their top page:
FFXI Somepage Website Top Page And for those who don't want to even surf over there I quote: "ffxi.cannotlinkto Site Security
Posted by: Cuer - Wed Dec 19th, 2007 02:29 am EST
We have recently had two issues with security on this site, that deserve mention. The first involved a spam link that had been nefariously inserted into one of our news listings, that directed to an unsavory site. The link was removed, and steps have been taken to prevent further attacks of that nature.
We have also had some spam in the comments, from people linking to alleged fishing bots and other such programs, that were designed to steal FFXI accounts. Those comments have been removed, and further effort put into weeding them out if they show up down the road.
We take security seriously, and appreciate everyone who let us know about these issues. If you see any other problems like these, don't hesitate to leave feedback letting us know.
In other news, we do have some updates coming that will expand the item database, and add various useful guides. These will arrive in the new year. Happy Holidays!"
That is how it is happening easily to people on PS2's so easily.
I truly feel for you... I panicked when this all started happening and have begun to change my password almost weekly (to an uber hard/long password) and to not give ANY of my player data (namely login info) to ANY site. Even the POL website until SE changes their security about password changes online (thru POL) and their account reclaim/verification process. Edited, Dec 26th 2007 6:49pm by lewbaby