CRYPCTB
January 30, 2015
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
The crypto-ransomware CTB (Curve-Tor-Bitcoin) Locker/Critroin surfaced in July 2014. Apart from demanding for ransom and encrypting files, this ransomware uses Tor network to hide its C&C activities.
This ransomware variant may arrive as an attachment to spammed messages.