New ransomware spotted NamPoHyu Virus or MegaLocker virus targeting remote samba servers in a unique way. The new variant searches for the servers that are accessible online, brute force them and then remotely encrypt the files. For personal victims $250 and $1,000 USD in bitcoins for companies $250 or $1000 for companies. More than 500,000 Samba servers are available remotely if the infection gain access to all the servers then it could be a massive one. It encrypts the files in the system and asks to make ransom payment through Tor site.”]
Source: https://gbhackers.com/ransomware-targets-samba-servers/