Stolen VPN credentials at the heart of the infamous Twitter hack