Researchers at MalwareHunterTeam have discovered a new strain of ransomware called RansSIRIA that encrypts victims files and then states it will donate the ransom to Syrian refugees. Ransom note also contains a singular message to explain the ransom will be used to help Syrian refugees. The ransom note is written in Portuguese, below the translated text was published by experts at BleepingComputer. The malware will show a gallery of cruel images that show the dramatic situation in Syria and will play a YouTube video of the Save the Children organization that shows the suffering of Syrian children.”]
Source: https://securityaffairs.co/wordpress/71626/malware/ranssiria-ransomware.html