For as little as £1.67 banking details stolen from more than a million people worldwide can be bought from the website on the open internet, rather than on the "dark web", where much online criminality takes place, it is being claimed.