New trojan called Lampion has spread using template emails from the Portuguese Government Finance & Tax during the last days of 2019. The emails are related to the Rendimento de Pessoas Singulares IRS (annual tax declaration), and any citizen who has received the message can be misled by criminals as the end of the year is the right time to discuss issues within this context. The malware was named ‘Lampion’ as this is the name used as part of its internal name.”]
Source: https://securityaffairs.co/wordpress/95731/malware/lampion-malware-targets-portugal.html