Recently, I've got a call from an organization that all of their files has been encrypted by a ransomware (called JSWORM) and they must pay ransom to get their data back.