Nowadays, it is very common to receive emails with virus-contaminated Word documents from various senders.
However, the striking common factor is that they disguise themselves as the senders of a customer or client,
and also use responses to ostensibly real emails:
All relevant information can be found in the appendix.
Customer email address
Dear Ms [customer name],
I still have not received any feedback from you with regard to project XY. I kindly ask that you get back to me with further information.
The emails do not come directly from the customer/client, but rather via various email servers from all over Europe.