Hackers make money by using social engineering techniques. Phishing, the most common one, includes impersonating a legitimate organization (such as a bank) to obtain personal information: username, email address, password, or even credit card information.