The hackers were hacked: a DDoS tool popular with Anonymous denizens was modified to include a trojan that steals banking and webmail credentials.