Unauthorised software on a client computer/server which is used for attack.
Malware can capture keyboard, mouse or screen output which can then be parsed to find login credentials.