Brad Duncan has a very good article, with an example of the phishing email and infected package on SANS Internet Storm Centre today.
Qakbot infection with Cobalt Strike and VNC activity – SANS Internet Storm Centre
Being familiar with these types of phishing email is your organisation’s best defence. At the end of the month I am running an online seminar covering many example of such malicious emails – and various social engineering attacks.
Clive Catton MSc (Cyber Security) – by-line and other articles