"Friend" added without consent? Bug or hacker? (DeadStopper/Leo/LindaCRS)

[BLINK]

A coop teammkiller named "leo", who usually goes by the name "DeadStopper", when he isn't impersonating another user "LindaCRS" - managed to add himself to my account as a "Friend". He did this after I told him I was going to report him for Harassement, for teamkilling the other players in an Expert level Coop game (which I did). After adding me to my Friend's list, he sent me a message saying "You shouldn't give other people you password", implying he had my password. Is it Steam policy to let other people add themselves to your Friend's list, without your consent?

[Andrade- IV ( MILF mod)]

Change you password right now!!
Maybe he have some keylogger, so he must know you password. report him and send a ticket to steam support.
Oh, and make a scan of you PC looking for some spyware,malware or virus.

Sorry for my bad english!

[Kurt101RR]

My friend got suspended for DOS attack, because 50 people reported on his profile and no evidence. I hate that steam employees reply on the report button when 50 people hit it...its not exactly fool proof.

As they say, make your profile private, and avoid adding friends period.