Hackers are getting better at tricking people into handing over passwords — here’s what to look out for, according to experts