The operators of Nemty ransomware have found a new distributor for their file-encrypting malware, which now spreads via Trik botnet. The malware is spread to systems that have the Server Message Block (SMB) network communication protocol exposed on the web and protected by weak credentials. The developers behind the Nemty malware are constantly updating and improving its code and delivery methods, as well as its delivery methods. Free decryption is available for versions 1.4 and 1.6, with one for 1.5 being on the way.
Source: https://www.bleepingcomputer.com/news/security/nemty-ransomware-now-spreads-via-trik-botnet/