The new malware family was seen pretending to be an official Italian app, called Immuni. The malware family is taking advantage of the rollout of Immuni Italy s official coronavirus-tracking app. Once installed, the malware executes in the background, encrypting user data. Once its work is complete, it surfaces a ransom note to the victim, asking for 300 Euros in exchange for the decryption key. The ransom note is far from straightforward, and includes sign-of-the-times references to Greek gods.
Source: https://threatpost.com/funicorn-ransomwarecovid-19-contact-tracing-app/156069/