Beware of the new Jaff Ransomware

[bogdan.moldovan]

A detailed analysis from Cyren:
https://blog.cyren.com/articles/locky-2-jaff-ransomware-launched-from-necurs-botnet.html

Yet again the delivery vector is email. If you are managing on-prem email servers, make sure your filters are active and properly configured.