For cybercriminals, stealing your login information can be just as valuable as stealing your bank account information. If they gain access to your email and password, they may find clues in your account that they can use to create highly targeted phishing attacks against you, your organization, or your family. Once the hackers have your login information, they can even sell it for payment.How Does It Work?
A popular method used to steal your credentials is to use fake login pages to capture your login details. These types of attacks usually start with a phishing email that directs you to use a link in the email to "log in to your account". The emails are usually authentic-looking and present a seemingly normal request. If you click this link, you’re brought to a login page that looks almost identical to the one you’re used to but is actually a fake page. Once you’ve entered your email and password on the fake page, you may be redirected to the real website–leaving you unaware that your login credentials were stolen.