Hackers are modifying the open source code of a popular malware strain, adding tools and functions that make it easier to steal data.