Popcorn Time offers victims the ability to get a free decryption key if they can get two other people infected and have them pay the ransom. Russian authorities have arrested a man suspected of writing and distributing ransomware. The suspect, whose name hasn’t been released yet, goes by the nickname of Pornopoker. The Kelihos spam botnet has been busy spreading the latest version of the Shade ransomware (also known as Troldesh), which now appends the.no_more_ransom” extension at the end of each encrypted file.”
Source: https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-9th-2016-osiris-pornopoker-popcorn-time-locked-in-and-more/