Passwords are a perennial security vulnerability, but threat actors’ means of accessing this information has historically been relatively stagnant.