The Domino Ransomware is a new infection that is based off of the Hidden Tear open-source ransomware project. It pretends to be the KMSPico Windows activation crack that will actually install KMSpico, but also encrypt a victim’s files as an added bonus. Included in the ransom note is a Game of Throne’s reference of “Winter Is Coming!””
Source: