Ransomware Attacks Private Data

This advisory warns of increased phishing and ransomware activity during the holiday shopping season: attackers send spam emails impersonating retailers (fake receipts, tracking notices, discounts) and host fake storefronts and tech-support pages to trick users into opening attachments or clicking links. Malicious payloads described include malformed Word documents with macros and ZIP files containing JavaScript that download Locky ransomware; the report includes example suspicious filenames, phishing trend charts, imagery of fake sites, and practical defenses such as inspecting email sources, avoiding attachments, using HTTPS and 2FA, keeping software patched, and maintaining backups.