Can a DDOS attack be used to steal my identity?