I’ll say it again – the more you and your team are familiar with the social engineering and phishing strategies used by the threat actors the better your cyber security will be.
Following the emergence of Bumblebee malware as a significant threat, SANS INternet Storm has a post looking at the function of the malware and transferring ISO files.
Bumblebee Malware from TransferXL URLs – SANS Internet Storm Centre
This is an excellent post by Brad and not only shows you the mechanics but the types of screens you are likely to see as well.
Further Reading
More malware on the rise – cybergangs are using new malware Bumblebee – Smart Thinking Solutions
Exposing initial access broker with ties to Conti (blog.google)