Research reveals that the ransomware operators hacked the IObit forum to create a fake promotion page and host the ransomware download. It is quite likely that the attackers gained access to an administrative account after hacking the forum.
Read full article on HackRead