Ransomware known as ‘Sarbloh’ is being distributed through malicious Word documents that contain a political message in support of Indian farmers. Sarbloh is based on open-source software known as KhalsaCrypt that unfortunately has no known weaknesses. The ransom note contains a message supporting the farmers in India. It is unknown whether the malicious Word document is sent via phishing emails or another method, but when opening it, users will be prompted to ‘Enable Content’ to view its content correctly.
Source: https://www.bleepingcomputer.com/news/security/new-sarbloh-ransomware-supports-indian-farmers-protest/