Victim explains how Amazon account was hacked using ‘credential stuffing’