I found out this morning that it has a feature where it notifies you if it sees a change to the PayPal or equity partner address.
I received 2 notifications today. This scum had changed my info to his:
deng.mis [at] hotmail.com
He also inserted an "f-word" support email address.
I changed my RAP admin passwords, not sure if that will matter, and posted for advice in the RAP forum.
Point is, if you don't have your products on RAP Bank, you'd better check your dashboards. I doubt I was the only person hit.