Attackers use Citadel malware to target password management apps