Successful hits allow attackers to take over accounts, steal personal information, or make unauthorized purchases.