Tell HN: Thailand pass applicants receive malicious code via email

Me and my girlfriend are planning to go to Thailand. Today we got another email from the Thailand pass people (needed for entry):

  There is a problem related to the request, please download the attachment and update the information.

  Please prepare your documents for submission at the check-in desk and relevant agencies
  Passport with visa (if required)
  Thailand pass QR code (on mobile device or hard copy)

  Download Document

  https://bit.ly/XXXXXXXXXXX

  important note. You must open the document from a PC and not from the phone

The link is leading to an HTML file hosted on discord, which is prompting the user to download some malicious VBS code.

It's easy to detect for technically apt people, but it almost fooled my girlfriend.