Hackers resorting to password theft