Researchers are warning of a new email phishing campaign that launches a trojan capable of distributing ransomware and stealing passwords.