Thieves sell hijacked accounts with in-demand skins online after locking out original owners.