The Necurs botnet, one of the largest and most resilient criminal botnets out there, has reportedly made a comeback with an enhanced version of Locky ransomware, among other threats. The bulk of emails identified by Bitdefender targets employees from various worldwide companies including construction companies, photo library sites and grocery stores. The messages pose as reports sent by the CEO and contain an attached.zip file which download a stealthier iteration of the Locky. The payload is delivered via JavaScript attachments.”]

