IcedID Circulates Via Web Forms, Google URLs
Attackers are filling out and submitting web-based "contact us" forms, thus evading email spam filters.