Attackers are using fake Windows Defender Antivirus emails to distribute QBot malware. QBot is a complex trojan that commonly operates as a downloader of other malware samples. In late August 2020, Bleeping Computer revealed that QBot had begun using a new template in its email attacks. This template also used stolen branding. It displayed a fake security warning from a Microsoft Word document within a Word document. It then instructed the user to decrypt the documents contents by clicking Enable Content’ and enabling macros.”]
Source: https://securityintelligence.com/news/qbot-malware-using-windows-defender-antivirus-lure/