The gang has infected thousands of PCs in corporate and government networks with programs that steal passwords and other information, a security researcher has found.