CERT-IL Alert: an active phishing campaign in Israel leads to malware

The email was spoofed to be sent from the Israel Post ("Israel Post") but the sender's address is support@w3itexperts[.]com. The email contains a 1.28MB HTML file. Running the file downloads a malicious ISO file to the workstation. The malicious email was sent to at least dozens of users. As of this writing, the HTML file is not recognized at all by the AV engines in VT, so there is a high probability that it may go through email filtering systems.