Threat actors are now targeting KeePass to spread malware and steal credentials, posing a major risk to users of this password manager.