Cybercriminals steal thousands of bank passwords