Locky was the dominant ransomware in 2016, but was less active in the first quarter of 2017. Now the threat is back with a new Necurs-driven campaign, which was first spotted on April 21. Necurs is a major botnet with estimates last year of up to 1.7 million captive computers.
Article Link: http://feedproxy.google.com/~r/Securityweek/~3/k7q-GZfrQQw/locky-ransomware-returns-new-necurs-driven-campaign