Nothing in the attack chain screams malicious software, except none of the impersonated HR and payroll providers actually offers a desktop app Joe Fay chairs a Register dinner in New York on the file ...