Attackers are sending messages disguised as offers from meal-kit services, like HelloFresh.
Threatpost