The biggest problem is trojans.
Mostly the passwords are stolen with trojans, and some people dont know much about that kind of stuff so they are unprotected.
The ftp passwords sometimes are stolen this way , but sometimes it is just people leaking the password.
I dont think many people are able to guess passwords x.x