Port 22

Fake Google Software Updates Spread New Ransomware

“HavanaCrypt” is also using a command-and-control server that is hosted on a Microsoft Hosting Service IP address, researchers say.