Erika –
Victim Location 49684
Type of a scam Business Email Compromise
Crypto Virus Ransomware was installed on system when user opened attachment in an email. Changed all file extensions to an unusable ext and sent message that bitcoin or prepaid cash be paid to release files.