A new ransomware called MoneroPay has been discovered that tries to take advantage of the cryptocurrency craze by spreading itself as a wallet for a fake coin called SpriteCoin. While users were installing what they thought was a new cryptocoin, the ransomware was silently encrypting the files on the computer. While the ransomware is running it will also attempt to retrieve passwords stored in Firefox and Chrome. It is not known if anyone has paid the $120 ransom request to get the decryption key and successfully decrypted files.
Source: https://www.bleepingcomputer.com/news/security/moneropay-ransomware-disguised-as-wallet-for-fake-spritecoin-cryptocurrency/