A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

In-house software built in March with open-source components may include malware placed there by criminals. This isn’t a ...