A new phishing campaign spotted this September shows increased sophistication from the operators, who take over email accounts and insert a banking trojan in conversation threads. […]

from https://www.bleepingcomputer.com/news/security/new-phishing-campaign-drops-ursnif-into-conversation-threads/