Ransomware, and then some
RTM group attacks victims with ransomware, a banking Trojan, and remote-access tools.