Cybercriminals sell stolen account logins, including email addresses, to those who want to use them for fraudulent purposes, such as placing pizza orders with someone else's account.