A link in the e-mail, which claims to provide a financial activity statement, downloads a malicious file.