Billions of login credentials have been leaked online, Cybernews researchers say