Researchers have uncovered information about a botnet found to have stolen two-million passwords from social networks and other online services.