Banking passwords belonging to 31,000 Australian customers have been stolen using malware and traded through the dark web, with experts fearing customers could lose their money.