Re: Mitigation
They got lucky. It was a phish email with a link to the malware payload. As there was no attachment the AV didn't pick it up and it got through the antispam filter.
It was a convincing looking fake Aus Post mail that went to a user in the goods receiveable department.