These Trojan downloaders arrive in emails masquerading as orders or invoices. source: www.techworm.net