It is a type of malware, a Trojan that circulates since 2013, evolving from police ransomware whose objective was to perform click-fraud operations. In 2015 incorporated new functions to avoid detection, and it is used to deliver other types of ransomware or to pick PCs into botnets.