The researchers explained that credentials are needed for the password breaking. Once compromised, these accounts can be delivered on the black market. Then, one could use them for visitors’ redirection to host malicious content.