KnowBe4 - Snail-Mail Phishing with a CD as Bait

Several state government offices in the US have received CDs by mail, infected with malware. It's a clumsy attempt, according to an alert the Multi-State Information Sharing and Analysis Center (MS-ISAC) shared with state and local governments. The CD shows up in the mail with a Chinese postmark and accompanied by what MS-ISAC calls a "confusingly worded typed letter with occasional Chinese characters." The CD itself holds Mandarin-language Word files. Some of the documents are seeded with malicious Visual Basic scripts.

from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/snail-mail-phishing-with-a-cd-as-bait