Even if the malware steals your password, MFA can prevent attackers from accessing your accounts.
Sent as an "invoice" or "urgent document" attached to an email.
If you have accidentally downloaded a suspicious file, perform a Full Scan using updated anti-malware software immediately.
Phishing Campaign Delivering Three Fileless Malware - Fortinet
Disguised as "activators" or "patches" for expensive software (e.g., Photoshop, Windows activators, or games).