The biggest news this week is the UK formally attributing NotPetya to Russian attackers. Ransomware is being actively distributed, but at this time it is unknown what distribution methods are being used. The UK has become the first major Western country to formally accuse the Russian military of orchestrating and launching the Not Petya ransomware outbreak. A new variant of the. desuCrypt. appends the.Tornado extension to encrypted files and drops a ransom note named key.d BLOB.
Source: https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-february-16th-2018-notpetya-and-saturn/