The ransom pages came with two designs based on the victim’s geolocation: FBI or Europol.
Today, I discovered further customizations showing that the bad guys are busy updating their templates for each country’s police force.
|sample: click to enlarge|
A couple things to note:
Safari users are still stuck and must employ one of the two methods described here to get rid of the page.
Not all countries currently have their own ‘theme’ but it is only a matter of time before the bad guys roll them out.