A new Variant of Locky Ransomware has been discovered and has been spreading through a Spam Campaign with the Subject Line "Status of Invoice". Moreover, the attachments are compressed using 7z, rather than using the .zip extension, which can easily be uncompressed by normal users. Ykcol also tries to delete the Shadow Volume Copy so as to refrain the user from recovering the encrypted files.