Fake Google Gemini installers are being used to deliver Vidar malware, stealing browser passwords and sensitive user data.