A malware that steals credentials and cryptocurrencies uses Unicode for invisible code and installs a remote access trojan.