Fraudsters have identified gaps and are using malware and phishing campaigns to scoop up data, duping the unaware and unprepared.