A new ransomware called CoronaVirus has been distributed through a fake web site pretending to promote the system optimization software and utilities from WiseCleaner.com. The malware will attempt to steal cookies and login credentials from web browsers, messaging programs, VPNs, FTP, email accounts, gaming accounts such as Steam and Battle.net. It will also attempt to take a screenshot of the active desktop and try to steal cryptocurrency wallets stored on the infected computer. On reboot, the ransomware will display a lock screen displaying the same text from the ransom note before Windows is loaded as seen below.
Source: https://www.bleepingcomputer.com/news/security/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer/