Pay extra attention to emails with password-protected zip files, as this is their typical method of bypassing email filters.
These types of targeted attacks are even more severe than regular phishing attacks, such as emails containing the URL of a fake login page.
The IT department reported the case to MSB according to
https://www.cert.se/2022/02/cert-se-uppmanar-organisationer-att-skarpa-uppmarksamheten
We really appreciate that you report if you would get something similar.
