Server Misconfiguration Lifts Lid On FancyBear Credential Theft Operations