there are many ways as hacker gains of login with the account. sometimes they are not modest on technicals but only depending with their chance as creating phishing site to collect information from failed users as inputing details with the phising site. i have experience once as accidently entering login to false forkdelta website.