I don’t know if there is a trend but I recently found some malicious Python scripts (targeting Windows hosts) that include a GUI. They don’t try to hide from the victim but, on the opposite, they try to make them confident. One example was the game[1] combined with an infostealer.
Article Link: https://isc.sans.edu/diary/rss/30632