Credential theft occurs when apps or websites steal login details such as Google, email, or banking credentials.