 have your email address and password. They'd have to manually enter it site by site. But in the world of AI, they have access to tools that can gather information about you and a ton of other people, and then just lodge those passwords at various accounts in real time. So a lot of the fraud is similar, but the scale of the attack is more broad and the telltale signs that there might be some fraudulent activity happening are harder to spot.