The attack gets a lot of things right that many others fail at. The premise is actually believable: the text doesnt render, and it says that is caused by a missing font (HoeflerText, which is a real font, by the way!), which it then prompts you to download and install. The file in question is not caught by Windows Defender or Chrome as being malicious. An upload to VirusTotal reveals it as never-before-seen, with only 9 out of the 59 antivirus scanners in its database correctly identifying the file as malware.”]
Source: https://neosmart.net/blog/2017/beware-of-this-new-chrome-font-wasnt-found-hack/