This spam has a .7z file leading to Locky ransomware.
From: “AutoPosted PI Notifier” [[email protected]]
Subject: Invoice PIS9344608
Date: Tue, September 26, 2017 5:29 pm
Please find Invoice PIS9344608 attached.
The number referenced in the spam varies, but attached is a .7z archive file with a matching filename. In turn, this contains one of a number of malicious VBS
Article Link: http://blog.dynamoo.com/2017/09/malware-spam-autoposted-pi-notifier.html