A new version of the GpCode nasty first hit the Internet as long ago as spring 2005. The new Trojan, also named “Glamour,” demands a ransom of US$300 in return for a key to unlock files. Of the 168 functions identified in the code of the new variant, 63 were identical to the older 2006 version. This could mean that the original authors are actively modifying the code themselves, or they sold the source code to another group who is now in charge of the modifications.”]
Source: https://www.csoonline.com/article/2121837/ransomware-trojans-work-of-single-group.html