Microsoft issued an alert warning users to be on the lookout for ZCryptor The new ransomware variant exhibits worm-like behavior, proving itself to be capable of copying itself to removable drives. MalwareHunterTeam told Softpedia that he has seen some samples of ZCryptor targeting as many as 121 different file extensions, which suggests the malware may be being actively updated. The malware infects users computers via malicious spam, malicious macros in Microsoft Office documents, and fake software installers.”]
Source: https://grahamcluley.com/ransomware-displays-worm-like-behavior-copies-removable-drives/