A new and active campaign for the CryptON Ransomware is currently underway where attackers are hacking into computers with Internet accessible Remote Desktop Services. Once the attackers gain access to the computer they manually execute the ransomware and encrypt your files.
This new campaign was first discovered by Malwarebytes security researcher S!Ri who posted about it on Twitter.
Full Article.