TrendLabs: Spam Campaigns Upgraded

Figure 3. Distribution of second spam campaign 

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/locky-ransomware-pushed-alongside-fakeglobe-upgraded-spam-campaigns/