Password length is not enough , it’s can be exploit (show by RAR GPU Password Recovery)
Encrypt data protect your import data
Packet capture , catch your data on sending . Use SSL encrypt connect
IE CVE 2014 -1776 Expliot , XP doesn’t protect this exploit
Social Attack , like Line 、Facebook etc..