Threat actors continue to evolve their spam tactics by utilizing legitimate  Google Groups to send Fake order messages to target multiple users.  Fake order scams work by notifying victims about the purchase status or confirmation that originally was not placed by the recipient. They are motivated to steal the victim’s personal credentials – name, address, credit, or banking information, or trick the victim into installing malware on their computer.

Source: GBHackers