Current campaigns are allowing even novice attackers to scoop up authentication tokens with increasing frequency, bypassing ...