Cheaters have exploited a weakness in massive open online courses (MOOCs) to fraudulently obtain certificates.