Over 10 million have been potentially targeted by a malware campaign designed to steal crypto and credentials, say cybersecurity researchers at Check Point.