You can Crack accounts via bruteforce but isn't really useful anymore.
You can infect people with keyloggers,rats and worms via Youtube downloads, or like i like to use on Gaia is a JavaDriveBy.

Many ways other then phishing to get accounts.