Recently a data-wiping malware tracked as GermanWiper has been targeting German organizations. The malicious code is being distributed in Germany through spam messages that pretend to be emails sent by a job applicant. The messages have the subject Ihr Stellenangebot Bewerbung [Your job offer Application] Lena Kretschmer and have an attachment titled Unterlagen_Lena_Kretchmer.zip The archive in attachment contains two files. They are actually shortcuts (LNK) that execute a. PowerShell command to download an HTA file and execute it on the victim machine.”]
Source: https://securityaffairs.co/wordpress/89452/malware/germanwiper-campaign.html