Malware causes leak of millions of credentials