The network-targeting Ako Ransomware is being distributed through spam email. Spam emails pretend to contain an agreement requested by the recipient and use mail subjects such as “Agreement 2020 #1775505″”. Attached to these emails is a password-protected zip file named agreement.zip with the password ‘2020’ being given in the email. The extracted archive will contain an executable renamed as agreement.scr that when executed will install the ransomware. When Ako is executed it will encrypt the victim’s files and leave them with a ransom note.”
Source: https://www.bleepingcomputer.com/news/security/ako-ransomware-uses-spam-to-infect-its-victims/