 are the result of novel or dramatically new types of attacks. Mostly, they seem to be garden variety credential theft resulting from email phishing and the like. Same sort of stuff that's been going on for many years now, even though the technical means so largely prevent these have been known for almost as long.