Cryptolaemus on Twitter: "#Emotet Update - Ivan started up E4 spamming at approximately 14:15UTC. The current vector of the day is back to password protected ZIPs containing LNK files. The LNK files are actually working compared to Friday and are direct attached to the malspam in some cases." / Twitter
https://twitter.com/Cryptolaemus1/status/1518608288887287808