there are many ways as hacker gains of login with the account. sometimes they are not modest on technicals but only depending with their chance as creating phishing site to collect information from failed users as inputing details with the phising site. i have experience once as accidently entering login to false forkdelta website.
The scammer trap through fake websites has been around for a long time and for now it doesn't seem to work anymore because everyone who has been tricked has started to look carefully at all websites so they can tell the difference.