> I think people who write malware to steal banking info should be prosecuted when possible.

If I write a program that can steal banking info, what law have I broken? Isn't it only the actual theft that's a crime?