If you're using Kaseya VSA, you should go disable it IMMEDIATELY. This is an active attack.