Human operators make BazaCall malware harder than usual to detect malicious email. The group sometimes installs nasty Ryuk ransomware. Microsoft warns: These attackers can go from first contact to launching ransomware in just 48 hours
Source: ZDNet Microsoft