A new report by security researchers at Trend Micro revealed that a new ransomware family known as HavanaCrypt uses a Microsoft web hosting service IP address as its command and control server to evade detection by disguising itself as a Google software update app.