The notorious Reveton ransomware has been updated to steal passwords and credentials, according to researchers with security firm Avast.