Security researchers have come across an attack where an USB dongle was mailed to a company under the guise of a Best Buy gift card. The attack was analyzed and disclosed by security researchers from Trustwave SpiderLabs. A US company in the hospitality sector received the USB sometime in mid-February. The package contained an official-looking letter with Best Buy’s logo and other branding elements informing the recipient that they’ve received a $50 gift card for being a regular customer. FIN7, also known as Carbanak, is a financially motivated cybercriminal group that has been targeting US-based companies since around 2015.”]