Researchers discovered a new modular downloader, tracked as Marap malware, that is being used in large campaigns targeting financial institutions.