A monthslong email campaign at a global stock exchange shows how trusted Windows tools can sustain access without the noise of obvious malware.