We have been informed that several companies and private individuals have recently been the victims of ‘Malspam’ attacks (unsolicited emails containing malware). In these attacks, cybercriminals trick recipients into clicking on a malicious link, often disguised as an invoice. 

This link allows a remote management and monitoring tool to be installed on the victim's system. These tools, although they are legitimate applications, manage to circumvent antivirus software and give attackers full remote access to the compromised system

We encourage you to be particularly vigilant and not to click on links or open attachments in suspicious emails.

For more details on this type of fraud, please refer to the CIRCL communication below: https://circl.lu/pub/tr-93/