Credentials theft

GoSerpent backdoor attacks in Southeast Asia
OkoBot framework infection chain | Securelist
How the ToddyCat APT group gains access to Gmail accounts