The National Cyber Security Centre says the malware, known as Lumma Stealer, is designed to steal sensitive information including email address and passwords.