The Hakbit ransomware campaign was targeted at employees of medium-sized companies. The campaign was noticed in Austria, Switzerland, and Germany. With the help of a malicious attachment, Excel is delivered through the popular email provider GMX.
https://threatpost.com/hackbit-ransomware-attack-uses-guloader-malicious-microsoft-excel-attachments/156826/