Social engineering and phony call centers are used to trick victims into installing remote software. Then the gang steals data and threatens to leak it.
Article Link: Warning: This scam starts with a fake invoice. It could end with crooks stealing your data | ZDNET