The fake pdf attached to the "PURCHASE ORDER 05-30-2023" email contains a link, from which you download a tgz file with a TAR, inside which there is an exe: the malware.
Merry Christmas from Defense and Security
Merry Christmas to everybody, we’ll back on December 27th
The Staff of Defense and Security wishes a Merry Christmas to all our loyal readers. Best Wishes also to the military, Italians and others, deployed all over the world to restore or guarantee peace, away from their families and friends. Best wishes to all cyber security experts, who work non-stop every day to protect us from cybercriminals and the dangers of the Web. And, finally, best wishes to us too. We take this opportunity to inform you that the website will come back to its regular update schedule on December 27th.
The Staff of Defense and Security