Yea, if I was a cracker trying to get account passwords, I would quickly change all passwords as soon as I had phished an account, in order to steal it completely rather than just using it for wrecking.
I'm waiting to find out that one. Good thinking. I'm assuming there will be an IP log buried somewhere in the system, but I don't myself know where to go find it in a Windows2003 server. Yet.
Google reveals that mr. Stuff-stuff is a more or less known counterstrike player, and that the same [*****] "member" has been "active" in CS as well. Coincidence? nah.