Cybercriminals spoof Bank of America in phishing emails that install remote access software on Windows systems while harvesting data from Mac users.