ransomware's recent activity