There was this and this and this, and then this happens (translated from Portuguese using Google Translate):

Dropbox spam

This was sent via Dropbox [email protected] mail because she shared an image to me. So, yeah the email is legal. But, the message? Well, you know what that is.

Do you want to know the image she sent me? This:

She looks cute, doesn’t she?

Yes, the new way of spamming. Via Dropbox file sharing.

PS: Question: how does she know my Dropbox mail account? Maybe, the answer is that data breach incident. Maybe.