The credential-stealing malware took an extended spring break, but it's returned with a vengeance according to an alert from CISA and the MS-ISAC.