Researchers at RSA's FraudAction Research Lab have discovered that a single online gang has used one Trojan to collect over 500,000 bank and credit card account numbers.

According to The Washington Post, the gang used the "Sinowal" Trojan (aka "Torpig" and "Mebroot") to amass more than 270,000 online bank account credentials and roughly 240,000 credit and debit account numbers.

While it is not clear who is behind the attacks, RSA's Sean Brady suspects ties to Russian malware gangs.

But the current economy may make it hard for the gang to cash in on the stolen identities. As IT Business Edge blogger Susan Hall reported yesterday, the value of stolen credit card data is only one-tenth what it was 10 years ago.