The spam email poses as a notification from Visa about some rule changes in its payWave service in Russia. The attachments include password-protected archives—typically this tactic is used to prevent auto-analysis systems from extracting the malicious files for sandboxing and detection.

Read full news article on Infosecurity