Attackers are deploying CloudZ RAT alongside a new plugin called Pheno in targeted campaigns designed to compromise Windows software that bridges PCs and smartphones, with tactics specifically engineered to evade detection.