Ransomware campaign impersonates Interpol via phishing emails (infosecurity-magazine.com)

• Attackers impersonate Interpol in phishing emails
• Ransomware delivered via Proton Drive link
• Ransom negotiated through Tox messaging

"Bitdefender researchers identified a ransomware campaign where attackers pose as Interpol to target small businesses globally. Emails claim to be from Interpol's Cybercrime Investigation Unit and direct victims to open a password-protected file on Proton Drive. The file is an executable that installs ransomware. The ransom note instructs victims to negotiate via Tox."