The malware downloaded by Mark Koh was able to steal wallet credentials without his browser wallets being open.