The xlsb attachment on how to protect yourself on Black Friday-Cyber Monday contacts random link from an internal list and downloads the dll, starting malware infection.
The xlsb attachment contacts random links from an internal list and downloads the dll, starting the malware infection. It also tries to connect to the victim's email client.
Cryptolaemus cybersecurity experts: It is spread via spam emails with a zip, an xls or a doc attachment, which downloads a dll starting the malware infection.
The xlsb attachment of the "Termination Letter November" email contacts a random url from an internal list and downloads the dll, starting the malware infection.