Do not download Zoho Booking from an email link! It has remote access malware built in. Thankfully we realized what was happening before our information was taken and pulled the plug (literally) before they initiated a bank transfer. They will put up a crappy JPG of the Windows 10 blue screen on both/all monitors. Input from mouse and keyboard are disabled from your side, and cutting power is the only way to sever the connection. The mouse will still show on screen and move without input.
The email came to my boss's address from someone she thought was a customer we had worked with before. She downloaded it, despite a nagging feeling it was a scam. (Please don't bash her—she had a stroke and is stressed 24/7.) We went to lunch, and thank God nothing happened while we were out. My boyfriend and I noticed it first, and he's our IT guy now too. He remoted in via my computer and saw our banking info behind the JPG. I pulled the power, and we've since checked every computer connected to our systems. All our information has been changed and internet access removed from the infected device.
We're pretty sure all the malware has been removed, but we're wiping the drive anyway and adding some additional security measures.