Stolen Australian identities are selling online for as little as $280 on the dark web, research from online security experts shows.