A cyber-gang has stolen the details of over 500,000 financial accounts over the course of the past three years using a highly advance Trojan that remains undetectable to the majority of its victims.