Ransomware variant on the prowl