Hackers are still spewing out their attack at a frenzied rate, with many many instances being seen in our spam traps worldwide. Another version being seen at our global network of spam monitoring stations uses the subject line Recovery KEYS for your account with the attached file The_keys.zip. As before, you should not open these files as they contain a malicious Trojan horse (detected by Sophos as read more in my article on the Naked Security website.”]
Source: https://grahamcluley.com/activation-key-malware-morphs-its-disguise/