It was probably an app that had posting permissions on the account.

I think if you notify Facebook that the person has died (and provide some sort of proof) they switch the account over to "memorial" status (which can't post, etc.)