An email with the subject of Changes in Your Booking (Booking Nr:46081) [ random numbered] pretending to come from random names and email addresses with a zip attachment is another one from the current bot runs which downloads Teslacrypt They use email addresses … Continue reading →