Emails pretending to be from lingerie shop Ajour Lingerie and flower store Rose World are actually spreading the BazaLoader malware. Baza loader was first observed in the wild in April, and since then researchers have observed at least six variants, signaling active and continued development Bazaloader has been noted for its code similarity to TrickBot, and has been associated with Ryuk ransomware infections. Researchers: The Valentine s attack reflects an increase in an attack vector with an increase on human interaction.
Source: https://threatpost.com/valentines-day-malware-attack/163900/