“HavanaCrypt” is also using a command-and-control server that is hosted on a Microsoft Hosting Service IP address, researchers say.Source