'Magnat' malicious advertising campaign uncovered by Cisco Talos has been stealing login credentials and other data since at least 2018