Trojan.gen uses the lure of one of a number of Russian-language protest subject lines, including, ‘Meeting for equal elections,’ and ‘all to demonstration,’ offering instructions in the form of an attached Word document. The 500KB payload is about fifty times larger than the average bulk spam which is normally designed to pass across the mail infrastructure as efficiently and unobtrusively as possible. Symantec doesn’t spell it out but commercial or criminal spammers would be unlikely to send spam emails of this size even when using Word documents.”]
Source: https://www.csoonline.com/article/2131195/anti-putin-protesters-targeted-by-data-wiping-malware.html