Chinese hackers moves in to lucrative market of ransomwares and Polar Ransomware is the choice of APT27. It use randomly generated key using AES + RSA 1024. It then asked to contact Pt34Jarmys@protonmail.com or alex.dali@iran.ir for ransom amount and decryption key. .locked is appended to encrypted files.