mno@8

I agree with you re collecting as much info as possible about the victim and then use it. Same approach works for online bruteforcing using hydra.

There is an interesting post about it, just a bit naif but it shows the picture at:

How I Stole Someone's Identity: Scientific American


however

aren't you being just a little paranoid taking into account members profile here ?