Paper Werewolf deploys PowerModul in phishing attacks between July and December 2024, expanding espionage with password changes and media file theft.