Goodwill ransomware encrypts it victim data and then requires them to show kindness to strangers and confirm this with a message on social networks, as well as record a video in order to be able to return their files.

Yashma Ransomware is the paid version of Chaos Ransomware. It demands a ransom of 300 euros worth of BTC.

Kekpop Ransomware encrypts user data using a combination of AES+RSA algorithms and then demands a ransom of $500 in BTC to get the files back.

Quantum ransomware is the re-branded version of the MountLocker Ransomware. Threat actors uses IcedID malware as one of the initial access vectors that deploys Cobalt Strike. It then remotely access victim computers for data theft and to deploy Quantum Locker ransomware for encryption.

Stormous Ransomware gang is well know for website defacement and data theft. They recently targeted Coca Cola and stole 161 GB of data from there servers. They are currently asking a ransom of 1.65 Bitcoin for not publicly releasing stolen files.