Nameless malware stole 26m login credentials from 3.25m computers