Kimsuky uses phishing and a malicious Chrome extension to steal Gmail messages, attachments, and control infected computers.
WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...