Beware it steals log-in information for online banking and other accounts. One program even imitated a bank's website, tricking users into giving away their PINs and personal information, such as their mothers' maiden names.