New form of ransomware used to hide previous hacking campaign