A new CrypBoss ransomware variant has been released called UmbreCrypt. This ransomware family encrypts a victim’s data with AES encryption and then requires them to email the developers for payment instructions. At this time there is no way to decrypt these files for free, but Fabian Wosar of Emsisoft is looking into modifying his current decrypter to work with this variant. Previous variants of this ransomware, such as HydraCrypt, have been shown to be distributed via exploit kits.
Source: https://www.bleepingcomputer.com/news/security/umbrecrypt-ransomware-manually-installed-via-terminal-services/

