It can, but it's hard, mostly people just carelessly placing their private key in their device and get exposed because they visiting suspicious website or download and install suspicious file.