A spear-phishing email was detected, mimicking communication from a known partner, attempting to lure an employee into opening a malicious attachment with the objective to gain access to ICS vendor networks.