Well hackers are capable of doing anything.
Of you have not heard there are hacking / phising mails sent to you in the paypal which tell you that you have won a prize or there has been some update problem and they require your details to correct it. And when you click on the link they have given you will be directed to the page which they have created and once you enter your details thats all you have given them the official access to your account