3574
By Sunday 2017-01-08 , I saw an updated version of the Merry X-Mas Ransomware distributed through malspam disguised as court attendance notifications .
 ( phishing: disguised as,  court attendance notifications: trusted entity, the Merry X-Mas Ransomware: tool, Sunday 2017-01-08: time, distributed through malspam: attack pattern) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( phishing: disguised as,  court attendance notifications: trusted entity, the Merry X-Mas Ransomware: tool, Sunday 2017-01-08: time, distributed through malspam: attack pattern) 