"Successful campaigns have led to credential theft, malware staging, and persistent access using just a few keystrokes from ...