The massive Twitter hack that took place back in July came about due to stolen VPN credentials. It has now been revealed that Twitter employees were tricked into handing over their account details by hackers that had managed to create a site that looked identical to the genuine VPN login page.
https://www.techradar.com/au/news/stolen-vpn-credentials-at-the-heart-of-the-infamous-twitter-hack