Evolution of JSWorm ransomware