A new ransomware strain spreading as a result of supply chain attack targeting Chinese users starting from December 1 and infected more than 100,000 computers. Ransomware not only encrypting the system files, but it is also capable of stealing login credentials of popular Chinese online services such as Taobao, Baidu Cloud, NetEase 163, Tencent QQ, Jingdong, and Alipay. The operators use Chinese social networking Douban for C&C communication. The ransom is 110 yuan which is nearly $16.”]
Source: https://gbhackers.com/ransomware-strain-chinese-users/