Millions of bank cards have been leaked on the dark web amid an explosion in the number of devices infected by data-stealing malware, according to cybersecurity and anti-virus firm Kaspersky.