A new ransomware campaign relies on a Locky variant that is distributed through JavaScript that includes the binary of the threat itself.