A new ransomware called the XRTN Ransomware is in the wild that encrypts your data using the open source Gnu Privacy Guard (GnuPG) encryption software. This ransomware is made up of a variety of tools and batch files that perform the encryption of your files. It is installed via a JavaScript file that downloads various files from gusang.vpscoke.com to the victim’s computer. When infected, the user will be shown a HTA document that instructs the victim to contact the email address [email protected] for help.
Source: https://www.bleepingcomputer.com/news/security/xrtn-ransomware-uses-batch-files-to-encrypt-your-data/