Cybercrime, Italy hit by a huge Urnisf/Gozi “energy adaptation” campaign
Fake mails from Reveue Agency come all from .casa domains. The attachment, different for each message, contains xlsb. It, if opened, contacts a DLL which starts malware infection.