Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.