The Carbon Black ThreatSight team observed an interesting campaign over the last month.  ThreatSight worked with the Threat Analysis Unit (TAU) to research the campaign. This report is being released to help researchers and security practitioners combat this campaign as new samples are being discovered in the wild daily.  This attack, if successful, can infect a compromised system with both Ursnif malware and GandCrab ransomware.