Then spear Phishing is almost certainly more economical.

Or just plugging a device into your laptop while you’re not looking and stealing all your session state for browsers.