Researchers have discovered a powerful new blended data theft malware package spreading rapidly through legitimate Web sites.