DarkAngels Ransomware is yet another derivative of Babuk Ransomware. It is very similar to HelloXD Ransomware in term of functionalities. Reports on Dark Angels suggest that each ransomware sample is targeted specifically for a given organization.

This ransomware encrypts user data and then requires them to visit the ransomware website to learn how to pay a ransom and get their files back.

HelloXD is a relatively a new Ransomware operation that is drives form Babuk Ransomware. It is still in early developmental stages and adding functionality continuously.

Bumblebee Loader is a replacement for BazarLoader, which is used by Conti group to deliver ransomware. The Bumblebee infection starts through spam email. This email contains a link to further download an ISO file.

Goodwill ransomware encrypts it victim data and then requires them to show kindness to strangers and confirm this with a message on social networks, as well as record a video in order to be able to return their files.