Kimsuky uses phishing and a malicious Chrome extension to steal Gmail messages, attachments, and control infected computers.