Ransom.Cryptomix is a ransomware that encrypts files on the victim's machine and demands payment to recover the information. The name Cryptomix is a combination of two separate ransomware families, CryptXXX and CryptoWall, and was given this name due to the similarities between the families. Ransom.Cryptomix was first spotted in March 2016 via malicious spam campaigns and exploit kits, such as Nuclear, Neutrino and RIG.