Botnet Ransomware will Screengrab your Desktop

Researchers observed a revival of the Necurs botnet sending millions of phishing emails that deliver a JavaScript downloader which installs Locky ransomware or Trickbot; the downloader also executes a PowerShell script to take screenshots and send operational data back to remote servers. Users are advised to keep systems updated to mitigate this active, large-scale malicious campaign.