Members of the so-called Rock Phish gang of Russian cybercriminals have launched a new style of attack in which they seek sensitive data not only through phishing but also by installing malware.