Thanks Alexsei for the announcement!
Please people just do it!!! It is not worth even for a chance it happens to you.
I also know someone that was hit by this variant (He had RDP open and used torrents...I don't know which one was the point of entry...but I digress), paid and did not get back his files