Yup, that may have been it. It’s a nasty thing to do though, and I wonder at the lax security that allows a remote machine to modify code that runs on your console. What else can they do?