A new strain of ransomware dubbed GIBON ransomware was spotted by the ProofPoint researcher Matthew Mesa that observed it being distributed via malspam. The spam messages use a malicious document as attachment containing macros that once enabled will download and install the ransomware on a victims machine. The researcher dubbed the ransomware GIBon because of the presence of the string GIBON in two places. The malware drops a ransom note in each folder containing the encrypted files.”]
Source: http://securityaffairs.co/wordpress/65214/malware/gibon-ransomware.html