There were more than three billion brute-force automated account takeover attacks detected last year alone.