Not so hard, as a procedureSecurity on the Internet is just a dream and you know it. If a hacker wants to do something, he or she can do it. If one system is secure and cannot be hacked, then they will steal the data of someone who has access to it, and then, do the "work" from the inside. Do you think you're safe just because some sites ask you for authentication? Let me tell you that not even CAPTCHA is secure. Nothing is.
Have you noticed that when you want to do an online transaction the bank site asks you a lot of stuff so that they properly identify you? They go very deep with these questions. Indeed, this is a good thing, otherwise, anybody that would know a little something about you could easily get into your account. This just makes it a little harder for you to be a victim of cyber-fraud, but it does not make it impossible...
It isn't easy for the average Joe to hack your account, but hackers can do it, if they strive hard enough. So what to do? Well, first thing is to be careful what you click on and the second is to deploy good security measures on your computer!