Version 1117.1 can skim user credentials from Internet Explorer, Firefox, and Chrome as well as email clients. The new version uses a different method to steal credentials in each of the targeted applications, something the authors point to as being one of the advantages of the scripting language in which the script language is written. For more, read here and here from the Zscaler ThreatLabZ, the new version of the software is available now on the market for $1,000. For confidential support call the Samaritans on 08457 90 90 90, visit a local Samaritans branch or click here.”]
Source: https://www.darkreading.com/attacks-breaches/ransomware-upgrades-with-credential-stealing-tricks