Clop is the Russian word for "bug" (bed bug). CLOP Ransomware is attributed to TA505 APT.It can be land on its victim machine by hacking through an insecure RDP configuration, using email spam and malicious attachments.

Nefilim which is a new version of Nemty Ransomware is released in wild. Nefilim is distributed via exposed Remote Desktop Services unlink its predecessor Nemty.

Milum Remote Access Trojan (RAT) by new Threat actor WildPressure. It is know to be targeting Middle Eastern firms. Milum is written is C++ with Standard Template Library.

A new ransomware called PwndLocker appeared in early March , targeting corporate networks. In the following weeks, the ransomware changed to ProLock Ransomware.

KPOT Stealer is a "stealer" malware that focuses on ex filtrating account information and other data from web browsers, instant messengers, email, VPN, RDP, FTP, crypto currency wallets, and gaming software.