u/TOFFA04

My sister works for a tour operator and yesterday recieved a email, with just the company name as subject saying:

"Hello {company name} My wife and i are planning to be visiting {city name} later this month. I wanted to check if you happen to have some available places for your tour while we're there? Thank you in advance!"

While my sister thought about a possible scam but her manager thought that maybe was just a legit email with missing details so they kindly answered the sender to provide more details.

Today the sender wrote a new email (not an answer to the previous email but a new email) complaining about behaviour of the staff claiming they received a rude and disrespectful response threatening to pursue legal actions if they won't receive Formal apologies and information about measures taken.

They attached the "proof of the conversation" image , the attachment was a 7z and After submitting it to virustotal

a lot of providers found viruses in it.