Got a few emails this morning, contained a link to this document file hosted on amazon, "SignContract.doc"
Doc runs this file
Encrypts file with .locked file extension which seems pretty common for lots of different ransomware.
Ransom Note: "LOCKED.txt"
All your files have been encrypted!
You have 5 days to decrypt and every 6 hours one file from your computer will be deleted
All your documents and files (databases, texts, images, videos, musics, programs) were encrypted. The encryption was done using a secret key that is now on our servers.
The Encryption is unbreakable and the amount for decrypt the files are 0.1 bitcoins in U$$ is approximately 150 U$$
To decrypt your files you will need to buy the secret key from us. We are the only on the world who can provide this for you.
What can I do?
Pay the ransom, in bitcoins, in the amount and wallet below. You can use LocalBitcoins.com to buy bitcoins.
The process is 100% automatic and once your transaction is confirmed in bitcoin it is only need send the transaction id and all your files will decrypted.
Bitcoin Amount: 0.1
Wallet for Sending Bitcoins: 18QqBF35VeNTcdWPZJFMy32hrYDHy9iSR7
I tried the ID Ransomware page, didn't seem to have any good results on the note, just search results based on the extension.