Spammer/Hacker logged into my account and created a character to gold sell?

[Sove92]

Have fun trying to brute-force a randomly typed password when there are billions of other possible passwords. Brute-force really only works for weak password, otherwise you need to extract the hashes from SE's servers