Please follow https://www.us-cert.gov/ncas/current-activity/2018/11/19/Holiday-Scams-and-Malware-Campaigns.