Yeah, but then you're picking what could be an invalid account and spending a large quantity of time trying to bruteforce the password to said invalid account. That's why I said it's far-fetched. You'd be better off putting that time and energy towards developing and distributing keyloggers to all of the retards that play the game.