After Locky, here comes KePanger, PowerWare and Petya: Retarus is currently observing a significantly higher incidence of the crypto trojan Locky, as well as new variations. Whilst in February only around 3% of all incoming emails were infected, the number of messages filtered in March due to viruses had already risen to 17%. This corresponds to a fivefold rise in comparison with the previous month and can be explained primarily by the large increase in ransomware.