The banking passwords of tens of of thousands of Australians have been stolen using malware and traded online by cybercriminals, the ABC can reveal.