Cybercriminals are sending fake emails designed to look like notifications from the Labor Department concerning changes to the Family and Medical Leave Act, IBM X-Force says. The spam messages contain three attachments – two PNG image files as well as what appears to be a DocuSign document. The attachments contain malicious macros that are designed to deliver the TrickBot malware. TrickBot started out in 2016 as a banking Trojan that can steal data, but has been updated to work as a downloader that delivers other malicious code.”]

