Just my two cents,

I don't think the account hacking issue has anything to do with Innerspace or ISBoxer. I have been subscribed to Innerspace since December last year. I only recently (couple months ago) got an authenticator for my accounts. I have never been hacked with or without the authenticator, or while using Innerspace.

What PROBABLY occured, is that some website you visited managed to install a keylogger on your system. That would explain how both accounts got hacked. If the keylogger is still on your machine, when you logged into your friend's account, it got his account info.

The fact that you happened to use the IS shortcut is probably just a coincidence. I would strongly recommend that you completely wipe and scrub your system to remove the keylogger, then re-install everything clean.

Also, your friend needs to get an authenticator ASAP, since whoever installed the keylogger now has his account login info. Without an authenticator, they can just brute force his password.