Programs which monitor the network traffic and from there tap into information like passwords. Widely disseminated and very easy to use. So passwords should never go over a network in unencrypted form, but be replaced by one-off passwords or by using SSH.