A new trojan circulating the internet could render security tokens used for home banking useless, experts warned.