Η theft passwords is not difficult: you just need to create a fake login page and ask your victim to login. The technique is known as phishing. If you do not have the knowledge to create fake websites some "entrepreneurs" in Russia offer free phishing services.
Their page is called “Fake-Game,” and researchers at security firm Fortinet say it's been online for over a year. It has over 60.000 active users and about 700.000 have been stolen passwords.
The "service" allows the creation and hosting of a fake login page. So all you have to do is select the page you want (facebook, steam or some other) and send the address to the would-be victim.
Sit comfortably and be alerted when someone bites the bait.
"Stolen certificates can sell for up to $ 0,015 to $ 15.39 at current exchange rates," the Fortinet report said.
All this can be done with a free service, although there are additional features for a fee. 3,50 dollars a month, or 7,12 dollars for three months, give you extra access to stolen accounts from other users, and prevent others from seeing the passwords you've collected and found in your account.
In fact, the "company" is very friendly to the "customer" since it has a customer service department, which will answer any of your questions…
The above news is another one warning for those who don't mind login URLs. You should always look at your address bar before connecting to any service page.
