It's called SynCryp and it's a new ransomware., The dreaded 'Cifralotodo' virus, that spreads via JPG and WSF attachments.
When opening the attached file, which will have a name similar to that of a subpoena or something of extreme importance, an image will open with the cover of the album by Olafur Arnalds entitled “They Have Escaped the Weight of Darkness”. At that moment the infection process begins.
When the malware has finished encrypting your computer, Encrypted files will have a new extension “.kk”. A folder named README will also be displayed on the Desktop. This folder contains multiple files, which will indicate the amount of the ransom, The encoded decryption key and ransom request notes.
What makes this distribution highly effective is that most antivirus vendors do not detect these image files as threats., so from IntecWe recommend you to take extreme precautions when using email.