PhishMe security researchers warn that the Locky ransomware is relying on the same delivery infrastructure which was previously used for the Sage ransomware distribution. Cybercriminals often share infrastructure between one another, so the fact that Locky and Sage use the same recourses is not that surprising.
Article Link: http://virusguides.com/locky-sage-ransomware-use-distribution-infrastructure/