CTB-Locker

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

CTB-Locker
Alias	Critroni
Group	Ransomware
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target	Microsoft Windows
Origin
Distribution vector	Angler, Spam
UserAgent
CCProtocol	Tor (Distributed-centralized)
Activity	2014 /
Status
Language
Programming language
Operation/Working group

Introduction

CTB for "Curve-Tor-Bitcoin"

Features

• Bitcoin payment

• Elliptic curve encryption

• Encrypt files

• Lock system

• Bitcoin payment

• Diffie-Hellman

Associated images

• 
  Ctb offline
• 
  Ctb online
• 
  Ctb start

Publications

	Author	Editor	Year
"Crypto Ransomware" CTB-Locker (Critroni.A) on the rise	Kafeine	Kafeine	2014
CTB-Locker is back: the web server edition	Ido Naor	Kaspersky Securelist	2016
Critroni crypto ransomware seen using Tor for command and control	Dennis Fisher	Kaspersky lab	2014
Kaspersky security bulletin 2015. Overall statistics for 2015	Maria Garnaeva Jornt van der Wiel Denis Makrushin Anton Ivanov Yury Namestnikov	Kaspersky Securelist	2015
Le dropper de CTB-Locker	Christophe Rieunier		2015
New crypto-ransomware emerge in the wild	Eduardo Altares II	Trend Micro	2014
Your files are encrypted with a “Windows 10 Upgrade”	TALOS	CISCO	2015