Serpent Ransomware appears to be a new variant of the HadesLocker and Wildfire ransomware family. It is being distributed via SPAM emails targeting Danish victims that pretend to be outstanding invoices. The emails will have a subject like “Sidste p..mindelse for udest..ende faktura 1603750″” and will contain a link to a Word document that the victim is told to download. MalwareHunterTeam was able to deobfuscate and extract the source code.”
Source: https://www.bleepingcomputer.com/news/security/serpent-ransomware-wants-to-sink-its-fangs-into-your-data/