Microsoft malware researchers say Locky ransomware authors are changing tactics again to evade detection.