New ransomware strain coded entirely in JavaScript
bbc.com
bbc.com
I thought it was going to be activex based, but actually it uses NW.js, interesting.
edit: actually the new ransomware in the article is this one: http://www.bleepingcomputer.com/news/security/the-new-raa-ra...
which does use WScript/ActiveX in its code so its windows only.