Ransomware called Black Ruby was discovered this week by MalwareHunterTeam. This ransomware will encrypt the files on a computer, scramble the file name, and then append the BlackRuby extension. Black Ruby will also install a Monero miner on the computer that utilizes as much of the CPU as it can. This way if the victim does not pay the ransom, the attackers can at least generate digital currency from them. This is not 100% confirmed, there is a good chance that Black Ruby is being installed via Remote Desktop Services.
Source: https://www.bleepingcomputer.com/news/security/black-ruby-ransomware-skips-victims-in-iran-and-adds-a-miner-for-good-measure/