Check Point researchers have discovered a modular malware framework likely designed by Chinese developers to harvest credentials for cloud environments.