Krita has become the latest victim of ransomware. But rather than being attacked directly, its name is being used to spread malware among users via emails offering advertising revenue.