Kimsuky uses phishing and a malicious Chrome extension to steal Gmail messages, attachments, and control infected computers.
SynkLoader malware is spreading through Microsoft Teams phishing, using a fake Windows lock screen to steal credentials and enable remote access.