ESET has observed a spike in detections of JS/Danger.ScriptAttachment, a malware downloader written in JavaScript that started on May 22 and peaked on May 25. Many countries in Europe have been affected, with the highest detection rates being observed in Luxembourg (67 percent), the Czech Republic (60 percent), Austria (57 percent), and the Netherlands (54 percent) and the U.K. (51 percent) The use of JavaScript-based attachments to distribute Locky began earlier this year, prompting Microsoft to post an alert about it in April.”]
Source: https://www.csoonline.com/article/3075728/new-javascript-spam-wave-distributes-locky-ransomware.html