Microsoft has publicly revealed the identity and location of a perpetrator behind ZLoader in order to deter others. The person had developed a ZLoader component that is used to distribute ransomware.
Digital crimes unit RSS
Microsoft has detailed some legal activity that it is engaged in to restrict the use of malicious infrastructure such as typosquatted domains - called "homoglyphs" - that are used for impersonation.