Microsoft warns: These attackers can go from first contact to launching ransomware in just 48 hours

Human operators make BazaCall malware harder than usual to detect malicious email. The group sometimes installs nasty Ryuk ransomware.