The biggest news this week is the retirement of the GandCrab ransomware and the continuing struggles of Baltimore and their RobbinHood infection. A new campaign uses spam emails with attached MS Office Word document to download Sokinokibi to the target system. The recovery remains in its early stages, with less than a third of city employees issued new log-in credentials thus far and many city business functions restricted to paper-based workarounds. The email pretends to be a warning letter from the fee collection center of public-law broadcasting institutions in the Federal Public of Germany and demands 213.50 EUR payment.
Source: https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-7th-2019-gandcrab-retires/