Sci-Hub seems to obtain these login credentials by two means:
1. Academics who support the program willingly contribute their credentials to Sci-Hub;
2. Academics unwittingly give Sci-Hub their credentials in response to phishing campaigns.
Please be careful!