Microsoft researchers have flagged new malware that can scan for and extract credentials from MetaMask, Coinbase, and Phantom wallets.