Virus Payloads disguised as Source Code targeting Business Development Teams

Sample URL with payload:
https://cactusclubindia.com/CRM_App.zip

So, the thread starts like this:

Client: Jean Aldwin

Task: QuickBooks Data Import

Client Requirements:

import data (invoices, names, phone numbers) to QBO from our old crm

Download details from this link (crm app): https://www.lsbin.com/wp-content/themes/begin%20lts/inc/go.php?url=https://cactusclubindia.com/CRM_App.zip[DONOT CLICK ON THE LINK – it is for reference only]