The email on an fake invoice contains an xlsm attachment. This contacts a random link from an internal list and downloads the dll, which starts the malware infection.
Isis in Deir Ezzor also lost Arqoub. The Jazeera Storm SDFs close the Islamic State north of Baghuz Fawqani
Isis in Deir Ezzor lost his last bastion, Arqoub, and now is confined a small portion of territory in Baghuz Fawqani. About 2 kilometers. Operation Round Up SDFs (Jazeera Storm), thanks to the International Coalition’s fighter raids, managed to conquer the village, forcing Islamic State jihadists to flee south to the Middle Euphrates River Valley (MERV). The Daesh militia, reduced to a few hundred, are closed in the southern area of Shajlah. The Arab-Kurdish forces are advancing on three axes. On the fourth there is the Euphrates and beyond the Syrian army (SAA), which attack them as they attempt to cross the river to escape to the Badia Al-Sham desert. The maneuvers at the moment have slowed down due to heavy rains in the province, but will resume as soon as they are finished.
The withdrawal of the Islamic State south of the Middle Euphrates River Valley (MERV) has allowed many civilians to flee to the SDF. The militiamen have less and less human shields and try to exchange western hostages with a safe-conduct for Idlib
Meanwhile, the SDF continue to welcome all civilians fleeing the areas in Deir Ezzor still under control of Isis. The fact that the jihadists of the Islamic State were forced to retreat south, has allowed many inhabitants of Arqoub and the nearby areas to leave the area and enter the humanitarian corridors, organized by Jazeera Storm. Daesh, on the other hand, has fewer human shields to use to protect himself from civil attacks and thus increases his vulnerability. Therefore, more and more terrorists are looking for every possible way to save their lives. It seems, in fact, that a group of IS elements is trying to exchange some Western hostages with a safe-conduct for Idlib. The news is going around the media but for now there are no official confirmations. Of course, the province in northern Syria would be the only safe place for them at this time.