Possible targeted attack

I’m posting here to have initial thoughts on what could be a targeted attack. In the last two months I was receiving masked calls(no caller ID), they happen in same hours of day. The latest call was around 2:00 am. What makes me suspect an attempted attack is the reception of a Telegram message containing only a compressed file with a name containing the string “Ghost”, I don’t remember the exact name of the file because I deleted the message right