If you're using Oracle's WebLogic Server, check for security fixes: Bug exploited in the wild to install ransomware

Big Red rushes out software patch as ransomware scumbags move in

IT admins overseeing Oracle's WebLogic Server installations need to get patching immediately: miscreants are exploiting what was a zero-day vulnerability in the software to pump ransomware into networks."