Online criminals have pulled off a tried-and-true password brute-force attack against online marketplace Zazzle. On 25 August, the company notified the Office of the Attorney General in California ...