An unidentified threat actor, reportedly originating from Vietnam, has been observed engaging in a ransomware campaign that commenced no later than June 4 and employing a variant of the Yashma ransomware, showcasing similarities to the infamous WannaCry ransomware. According to a new advisory published by Cisco Talos on Monday, what sets this operation apart is the novel approach to delivering ransom notes.

Source: Infosecurity Magazine – Information Security & IT Security