Original XPan Ransomware Returns, Targets Brazilian SMBs Posted on April 26, 2017 by Simon Steed Brazilian cybercriminals are using the original version of the XPan ransomware, targeting small to medium-sized business based in Brazil with the malware.