Pretty nasty to inject the malware download link to the covid booster shot appointment confirmation process. Requires certain capabilities from the attacker. https://www.nytimes.com/2023/03/20/world/europe/greece-spyware-hacking-meta.html