Kaspersky Lab experts detected a shifty scheme that allows fraudsters steal personal data without your login and password.