We explain how attackers can steal your credentials and how you can prevent it.