Adversaries may log user keystrokes to intercept credentials as the user types them.
Read the full analysis on IntelFusions