A security researcher uncovered an exposed online database that was stockpiling user information likely collected via malware-infected PCs.