Ransomware passing its self off as Google patches

A new strain of ransomware, HavanaCrypt, is being distributed by threat actors as Google software updates, exploiting Microsoft functionality: HavanaCrypt ransomware sails in as a fake Google update • The Register