The methods are numerous. The easiest are through
phishing or other forms of social engineering. The
attacker can then use gathered credentials against any
exposed authentication interfaces you may have:
registration, financial aid, web mail, VPN, Terminal
Services / Citrix. In a recent instance ...

[ more ]