Malware
lampion
Malware is delivered by emails, containing links to ZIP files or ZIP attachments.
lampion is a VBScript malware family.
Background
The malware arrives through emails that carry either links to ZIP files or ZIP attachments. Inside the ZIP is a VBScript that, once run, fetches further files from AWS S3, Google Drive, or other cloud hosting providers; those downloads are encrypted .exe and .dll files. Its targets are banking customers in Portugal.
Source: Malpedia (Fraunhofer FKIE).