The .z attachment of an email that simulates a legitimate sender contains an exe: the malware. The stolen data is exfiltrated via STMP to the same server as the RFQ campaign.
The Newsletter is sent on Saturday morning and contains news from the current week. You can select the one with all the contents, or by category. To stay up to date, however, we recommend that you follow the site every day or our pages on social networks.