New research shows that up to a half of all HTML email attachments are malicious, and not just because of a few massive campaigns.

Attackers are infecting computers with a new ransomware program called RAA that's written entirely in JavaScript and locks users' files by using strong encryption.