Researchers at Threat Fabric found incidents where Chameleon malware — which is geared toward stealing banking credentials — was aimed at users of customer relationship management (CRM) software.