The Astaroth Trojan steals credentials and other user data through antivirus software, Avast, and services. It sends scam campaigns with zipfile attachments containing .jpeg, .gif and extensionless files.