Recent spear-phishing emails are using a unique scare-factor lure to convince victims to open attached malicious Microsoft Excel documents. Attackers are purporting to send victims HIV test results but in reality are convincing them to download the Koadic RAT. The emails were sent to a slew of unnamed companies in various industries, including global insurance, healthcare, and pharmaceutical firms. Threat actors regularly use purported health information in their phishing lures because it evokes an emotional response that is particularly effective.
Source: https://threatpost.com/spear-phishing-attack-lures-victims-with-hiv-results/153536/