The number of users victimized by malware specifically intended to rob personally identifiable information leapt 600 percent this year.