Go payloads
https://www.bleepingcomputer.com/news/security/fake-antivirus-updates-used-to-deploy-cobalt-strike-in-ukraine/
Ukraine's Computer Emergency Response Team is warning that threat actors are distributing fake Windows antivirus updates that install Cobalt Strike and other malware.
The phishing emails are sent to Ukrainian state bodies and propose downloading "critical security updates," which come in the form of a 60 MB file named "BitdefenderWindowsUpdatePackage.exe."