Cybercriminals reportedly urged individuals to install the update to breach victims' passwords and steal crypto from their wallets.