Kaspersky Lab experts detected a sly scheme that allows fraudsters to steal personal data without your login and password.