The Sinowal trojan has captured more than half-million credentials and targeted more than 2,000 different financial service domains worldwide.