Seriously, I wasn't kidding.

So far, it was the only way to technically steal such password without dictionary guessing (I don't know the exact name of this, but same meaning) is to install that virus to the account holder's pc and have it send the password to you once that is recorded.