New STOP ransomware variant Rumba distributed via adware installers

The latest Rumba variant is being distributed using adware bundles and software cracks.
Some of the software cracks that are installing this ransomware include Windows activation cracks such as KMSPico, Cubase, Photoshop, antivirus software etc.
The STOP ransomware variants Djvu, Tro have been heavily distributed last month using adware installers. The new variant ‘Rumba’ has been spotted in the latest campaign distributed via adware bundles and software cracks.

In this new variant Rumba, the malware authors continue to use the same approach as DJVU variant. The only difference in this version is that the ransomware will append the .rumba extension to a file's name after it is encrypted.

Link to the article