Forgive me - out of morbid curiosity, how does this work exactly?

Did the OP have his account comprised and gil stolen through illegal access to his account? Is it a key-logger situation? Did they hand it over to some shady third party?