Millions of leaked credentials are lurking on the web, shared between cybercriminals through various channels.