Malicious MSI installer downloaded from the phishing landing page w0rkplace.de, spoofing Google Meet to deliver RAT payload to Windows users.