WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...
Kimsuky uses phishing and a malicious Chrome extension to steal Gmail messages, attachments, and control infected computers.