In this context, "phishing" often means "random other forms of social engineering that people started calling phishing almost a decade ago".

The attackers no longer steal a password and log in with it, they kindly ask someone to please run their malware.