Malware has compromised more than 1 billion passwords according to a new security alert—here’s what you need to know and do.