Romanian authorities have arrested five people on accusations of spreading email spam that infected users with the CTB-Locker and Cerber ransomware families. Investigators say they rented ransomware families from Ransomware-as-a-Service portals. The group packaged the binaries inside archived files made to look like invoices, which they sent to users as attachments part of email spam. Romanian authorities seized “a significant amount”” of hard drives
Source: and other documents.”