Fake emails with subject line ‘applying for a job’ are being sent to workplace email addresses. Once open the malware attempts to hijack private information, credentials from users from passwords and cookies stored in web browsers. Attackers can then exploit these acquisitions to make financial transactions.
https://securitybrief.com.au/story/new-phishing-campaign-disguises-malware-as-cv-attachments