Rapid7 researchers spot a malicious campaign aimed at harvesting credentials and digital wallets from Windows machines.