A keylogger on a user's computer might steal credentials and upload them to a remote server.

Index-of-gmail-password-txt: Understanding the Dangers of Leaked Credential Lists

When someone searches for intitle:"index of" passwords.txt or similar strings, they are looking for that have been accidentally left open to the public. These directories often contain:

Система Orphus