Phishing Deception - Suspended Domains Reveal Malicious Payload for Latin American Region

The phishing email contained a ZIP file attachment that when extracted reveals an HTML file that leads to a malicious file download posing as an invoice. The email header has an email address format that uses the domain ‘temporary[.]link’.