Blocknovas and Softglide used malware to access cryptocurrency wallets, passwords and credentials, cybersecurity researchers say.