Website, DB, & Software Developers

- Password cracking through password combos / commonly used passwords is a favorite. Also, keywords from a page used as password tries. Password info, as you said, can also be stolen, sold, and bought. The amount of people that don't encrypt is frightening.

- exploits

- admin accounts

- Trojans and key loggers

- an unprotected backdoor exploit found and shared among hacker groups (their websites aren't as secret as the idiots think, though)

- Honestly, though, most of them think its super 1337 to use DDOS. Script kids are usually terrible hackers and only get away with it because they're in foreign countries that don't care.