The Necurs botnet is spreading a new downloader that takes screenshots of the victims desktops and Runtime Errors back to the operators. Experts believe Necurs operators gather intelligence about their campaigns. Necurs malware spread via spam campaigns or through compromised web servers. Last time we read about it in January when it was being used by crooks to deliver the Locky ransomware and Trickybot (Trojan) Botnet appeared again in March after a period of silence from end of 2016 and into early 2017.”]
Source: https://securityaffairs.co/wordpress/64463/cyber-crime/necurs-botnet-downloader.html