Perhaps this may be associated with a lot of the mysterious disappearances of funds that we were seeing here 9-12 months ago, where people couldn't figure out where they had been compromised.
No matter how good you feel, there's always another zero-day waiting.
MS notes, " ... various methods to steal information from the target system, such as credentials stored in the browser, digital wallet information, data stored in the clipboard, as well as system information."
This is really nasty. Decrypts chrome credentials, persistence through SCM, RCE, and more.