Gain access to someone's server, somehow convince it to sign a transaction that sends the BTC your way, done.

And with no way to reverse it there's no way to pull the balance back.