Is this the new type of ransomware attack?  This honeypot was actively targeted by what appears to be criminal organization.