Ransomware with apparent links to a Dridex botnet affiliate has been spotted attempting to infect at least 450,000 computer users. Palo Alto Networks researchers have provided some backstory on the malware, nicknamed Locky, in a blog post published on Tuesday. The infection process begins with a fake financial spam email that comes with a malicious Microsoft Word document attached, such as this one described on Dynamoos blog: “Locky” The researchers say the attackers are aiming high in an effort to join the ranks of other big name ransomware families.”]
Source: https://grahamcluley.com/does-locky-file-extension-mean-means-youve-hit-ransomware/