As discussed in an earlier FireEye
we have seen Locky ransomware rise to fame in recent months. Locky is
aggressively distributed via a JavaScript-based downloader sent as an
attachment in spam emails, and may have overshadowed the Dridex
banking Trojan as the top spam contributor.
FireEye Labs recently observed a new development in the way this
ransomware communicates with its control server.