In contact with. Hacking accounts

Somewhere in early December, my VKontakte account began sending out mass invitations to groups, etc. spam It’s good that my friend promptly warned me and I immediately changed the password and, just in case, I changed the password on my email account, in combination with the login “VKontakte”. This turned out to be the right decision.
A few weeks later I received about a dozen emails from VKontakte with a password in my body, as if I forgot it and asked to send it to my inbox. I thought that it was not good. He began to look for where his legs grow and came across people who are engaged in “restoring passwords to your Vkontakte accounts using dynas. delays between requests and changing request headers, using small-scale mechanization .
In general, the meaning is such, they break your mailbox, as I do not know, and the subject is not this message. Create a list: email-password. They put this list into the program and it starts to beat VKontakte in the machine and ask to send the password to the mailbox, as if you forgot it. Then he goes to the mailbox, reads the letter that was sent to you from VKontakte, pulls out the password, deletes the letter. Shito is covered, visually there is no trace of any action. Now the attacker has access to the account on "VKontakte" and he can use this feature at his own discretion.
Warned - armed. Change your passwords regularly on accounts, there will be a chance that they will “not have”. If you have not had such a letter, this does not mean that you are safe. Warned himself warn another.