The Dridex malware gang is delivering a nasty gift for the holidays using a spam campaign pretending to be Amazon Gift Cards. The emails, shown below, pretend to be a $100 gift certificate that users must redeem by clicking on a phishing email button. When the button is clicked, it will download malicious Word documents with names similar to ‘Amazon_Gift_Card’ and ‘order_gift_Cart’ The emails prompt the recipient to click on the ‘Enable Content’ button. Doing so, though, will execute malicious macros that download and install the malware.
Source: https://www.bleepingcomputer.com/news/security/fake-amazon-gift-card-emails-deliver-the-dridex-malware/