By tricking individual users into downloading a remote access trojan through a fake browser or masquerading security software updates, threat actors then use legitimate tools to steal data before ...