Last revised or Updated on: 18th March, 2016, 12:37 PMA blank email with the subject of Attached Image pretending to come from a scanner, copier or multi-functional device at your own domain with a random numbered zip attachment is another one from the current bot runs which downloads Locky ransomware and a separate password stealer Now the nemucod .JS downloader inside the zip contacts 2 different download locations and downloads Locky ransomware from 1 location and a password stealer from the second location. This is really evil, first they steal your passwords, bank details and anything and everything else that they want, then they lock and encrypt all your files and demand a ransom of several hundred UK pounds or US … Continue reading →