Locky ransomware disguises itself as account suspensions and suspicious movements

Spammed-out attacks using similar techniques to dupe unwary internet users into clicking on an attachment that will lead to their Windows PC being infected with the notorious Locky ransomware. The method has been proven to be successful time and time again, especially when combined with cunning social engineering tricks. Bitdefender anti-virus products detect the malicious Javascript as Trojan.JS (Javascript) file, that if opened downloads a version of the Locky. ransomware from a remote server from one of five different URLs, saved in a temporary folder under the name GyFsMGsLUNA.dll”]

Source: https://www.bitdefender.com/blog/hotforsecurity/locky-ransomware-disguises-itself-as-account-suspensions-and-suspicious-movements/