This ransomware-dropping malware has swapped phishing for a sneaky new attack route

And it's using cryptographically signed bogus Java apps to avoid detection.