The Knight ransomware is being distributed in an ongoing spam campaign that pretends to be TripAdvisor complaints.