Emails disguised as court attendance notifications.
Upon execution, the ransomware performs the following actions: Merry X-Mas.rar
Emails posing as Federal Trade Commission consumer complaints. Emails disguised as court attendance notifications