The Metropolitan Police said the trojan was configured so that once installed in an affected computer , it recorded users ' bank details and passwords , credit card numbers and other information such as passwords for social networking sites .