VERY IMPORTANT

Yoroi has identified a new attack campaign aimed at Italian users and companies. The attacks are manifested through fraudulent e-mails that simulate communications from INPS containing an infected Excel document capable of downloading and installing a malware from the Ursnif family (TH-124). The particular attached documents are password protected and therefore there is the possibility that they will not be blocked by traditional perimeter defenses.