Mean time, you can report the Google Drive ZIP files for abuse to Google. I think you have to be logged in to Google and then you put the ID from the ZIP file's URL at the end of the following URL:

https://drive.google.com/u/0/abuse?id=��

On Fri, 14 Feb 2020 at 17:29, phil@highoctane.be <phil@highoctane.be> wrote:

This is spam from some hacker.

Replaced all passwords on my side and enable 2FA where not done yet.

Sorry for the noise.

Phil, the real one