It is a type of malware that logs every key you press on your keyboard and passes it back to a server. Once this sequence is captured it is easy to extract usernames, passwords etc. This is why it's imperative that you use two factor authentication if it is available. You should also be using a password manager such as KeePass so that you can use complex passwords that you never have to type out, just copy and paste them.