Password-stealing e-mails spread