L' INTELLIGENCE CYBER par Jean-Paul Pinte

The file is a PowerPoint presentation that is delivered to potential victims as a file attachment with emails bearing the subject line « RE:Purchase orders #69812 » or « Fwd:Confirmation ». The name of the PowerPoint file itself is « order&prsn.ppsx », « order.ppsx », or « invoice.ppsx », and there’s also evidence the file has been spread around inside ZIP files.

https://www.bleepingcomputer.com/news/security/powerpoint-file-downloads-malware-when-you-hover-a-link-no-macros-required/