There are several ways this could have benn pulled out! Hacker could have implanted a false DNS in your ISP router, and have taken you to a fake page to put the login info there.