This is not specific to ransomware. The title of the paper is

Phantom Malware: Conceal Malicious Actions From Malware Detection Techniques by Imitating User Activity Publisher