The xlsb mail attachment contacts a url and downloads the malware from an opendir, which also contains Ursnif/Gozi and is constantly updated.
Mystery on Russia’s abandonment of the bases in Ain Issa and Hasaka. Moscow troops would have left them to increase pressure on the SDF to hand over the villages on the M4 to the pro-Turkey militias. Then, however, they shot them by surprise
Mystrery in Syria on Russia’s alleged abandonment of the bases in Ain Issa, Tel-Tamir and Al-Mabaqir (Hasaka) to reposition itself in Tal-Samin, near Raqqa. According to local sources, the Moscow troops in eastern Syria have left the facilities to increase pressure on the SDF, so that they hand over the villages of Al-Ma’alaq, Jahbel, Jabel, Sayda and Al-Mushirfeh to the pro-Turkish militias. They are all located near the M4 in Kurdistan. Indeed, Ankara has long wanted to take control of the highway up to Ain Issa. So much so that it launches through allied armed groups offensive and infiltrating attempts into Kurdish territory on a daily basis. In the past few hours, however, it seems that suddenly the same Federation soldiers have returned to their original posts. It is not known what the reason is.