how could an online attacker use your online profile to gather information about you to steal your identity?