Stealing passwords is not difficult: you just need to create a fake login page and ask your victim to log in. The technique is known as phishing. If you do not have the knowledge to create fake websites some "entrepreneurs" in Russia offer free phishing services.
Their page is called "Fake-Game," and researchers at security firm Fortinet report that it has been online for over a year. It has more than 60,000 active users and about 700,000 passwords have been stolen.
The "service" allows the creation and hosting of a fake login page. So simply all you have to do is choose the page you want (facebook, steam or any other) and send the address to the would-be victim.
Sit back and you will be alerted when someone takes the bait.
"Stolen certificates can be sold from USD 0.015 up to USD 15.39 at current exchange rates," the Fortinet report states.
All of this can be done with a free service, although there are additional paid features. $3.50 a month, or $7.12 for three months, gives you extra access to accounts stolen from other users, and prevents others from seeing the passwords you collected that are on your account.
The "company" is even very customer friendly as it has a customer service department that will answer any questions you may have...
The above news is another warning for those who don't pay attention to login URLs. You should always look at your address bar before logging into any service page.
