Spear-phishing emails are spreading the NimzaLoader malware loader, which some say may be used to download Cobalt Strike.
Source: Threadpost