A Portuguese / Brazilian language email with the subject of Nota Fiscal Eletronica 09/05/2016 91616 pretending to come from OESA COMERCIO E REPRESENTACOES LTDA <naoresponder@oesa.com.br> with a zip attachment is another one from the current bot runs which downloads Locky ransomware They use email … Continue reading →