Like many computer scams, GOZ works by sending unsolicited emails containing an infected file, often a receipt or shipping confirmation.