The malware first emerged last year in what Check Point calls “underground forums” and was called a “stealer-as-a-service” that was available to purchase for just $3,000.