This type of thing is the very reason I have all these type services disabled on my systems.
https://www.bleepingcomputer.com/news/security/the-whiterose-ransomware-is-decryptable-and-tells-a-strange-story/
Cheers