Kaspersky Lab ICS CERT has identified a new wave of phishing emails with malicious attachments targeting companies and organizations that are, in one way or another, associated with industrial production. Phishing emails are disguised as legitimate commercial offers and are sent mainly to industrial companies located in Russia. The content of each email reflects the activity of the organization under attack and the type of work performed by the employee to whom the email is sent. This series of attacks started in November 2017 and is currently in progress.”]
Source: https://securelist.com/attacks-on-industrial-enterprises-using-rms-and-teamviewer/87104/