I would assume that I was being phished and the attacker wanted me to re-type the password to verify that it's correct.