Researchers claim major banks are implementing poor password policies and leaving customers vulnerable to brute force “key-search” attacks.