Researchers spotted a new Coronavirus-themed attack, the messages pretend to be sent from the World Health Organization to deliver Lokibot infostealer LokiBot. The campaign was uncovered on March 27 when the researchers noticed messages claiming to be WHO communications to address misinformation related to the COVID19 outbreak. The messages use an attachment, entitled COVID_19- WORLD HEALTH ORGANIZATION CDC_DOC. zip arj, that distributes the LokiBot trojan.”]
Source: https://securityaffairs.co/wordpress/101058/malware/coronavirus-campaign-who-lokibot.html