It's a known problem

It's an exploit related to the aimfight site. It's a simple matter to look up the buddy lists that your account is on, and a slightly more obscure method to add, remove, or delete from those lists. I've seen it done personally.