The notorious Jigsaw Ransomware has rebranded itself as CryptoHitman. This version uses the Hitman character from the popular Hitman video games and movies. The only major differences is the new pornographic locker screen, the use of the.porno or.porno.pornoransom extension that is added to all encrypted files, and new filenames for the. executables. The owners of the Hitman franchise are not affiliated to this ransomware at all! Thankfully, DemonSlay335 was able to modify his existing Jigsaw. Decryptor to also decrypt files encrypted by CryptoHitMan.
Source: https://www.bleepingcomputer.com/news/security/jigsaw-ransomware-becomes-cryptohitman-with-porno-extension/