The rar attachment in the fake email from a real UK company contains an exe: the malware. The stolen data is exfiltrated via FTP to a domain in Iran.
The Newsletter is sent on Saturday morning and contains news from the current week. You can select the one with all the contents, or by category. To stay up to date, however, we recommend that you follow the site every day or our pages on social networks.