Cryptolocker variant Torrentlocker making new victims in NL

This Fox-IT report documents a Torrentlocker ransomware spam campaign in the Netherlands (November 2014) that used malicious Word macros to download a dropper which installs ransomware that encrypts user files; it provides detection and containment guidance, host- and network-based IOCs (email subjects and sender, dropper URL, file paths, C2 hostname and IP addresses), and advice on isolation, backup restoration, and risks of paying the ransom.