GandCrab version 3 was released earlier this week with a few noticeable changes. The most noticeable change is the addition of a desktop background. The ransom note is still named CRAB-DECRYPT.txt and encrypted files still have the.CRAB extension. This version introduces the domain “carder.bit”” as a server that the ransomware communicates with. This one is a reference to those who perform credit card fraud. Unfortunately
Source: