The infamous banking Trojan Ursnif (a.k.a Gozi) has been continuously used in attacks against Japan for more than a year. The main delivery technique used is spam email with a malicious attachment that downloads the Ursnif executable from a remote site.
Article Link: http://www.securitynewspaper.com/2017/02/18/banking-trojans-ursnif-global-distribution-networks-identified/