A new more sophisticated phishing campaign uses hijacked email accounts to deliver malware as a part of the response to the existing the email thread. Security researchers from TrendMicro spotted the campaign mostly affecting North America and Europe, also they found the similar type of samples in Asia and the Latin American region. The malicious email appears to be just another reply to the thread and it includes even the signature, but they are different from the original ones. The main goal of the payload is to steal the following information.”]
Source: https://gbhackers.com/email-address-sophisticated-phishing-campaign/