Cybercriminals send the Remcos remote-access trojan under the guise of letters from a new client.