Some guides don't ask for passwords directly — they ask you to paste a JavaScript code into your browser's console while logged into your own free UploadGig account. This code extracts your session cookies and sends them to attackers, who then hijack your account.