It happened to me when i had a myspace i didn't use lol. You'd enter your email/password, then somehow get redirected to a site that looked exactly like the myspace homepage but the url was different.. but since you don't think to look at the url, you just go ahead and retype your email/password thinking you must of just entered it wrong and boom.. someones got your password.
Like i said before, i never really used the damn thing, just the occasional pop-in to check my messages. I got text messages from friends though asking me why i was spamming their pages and had no idea what i was talking about. Whatever bot phished my password was appearantly sending out messages in my name for different things like penis creams, unclaimed lotto tickets, saying i was a prince from some country no one's ever heard of and needed your help to cash a check and give you a generous commission, you know the usual stuff. I had to change the password until it happened again and i got phone calls from sensitive friends asking why i deleted from from my friend listing and whatnot. By then i couldnt remember the password to the email account i'd used to create that stupid thing, so it stayed as is.