GREEK POLICE HEADQUARTERS
Athens, July 23 , 2014
PRESS RELEASE
Update from the Cybercrime Prosecution Directorate on the emergence of a new malware, called CTB – Locker
The Cybercrime Prosecution Directorate informs citizens about the appearance of a new malicious software, named CTB-Locker (Curve-Tor-Bitcoin Locker) and detected as "Critroni", while it is the evolution of the well-known Crypto locker Ransomware malicious software .
Specifically, the new malware, upon installation on the operating system, encrypts various types of files (photos, videos, documents, etc.).
It then displays a message “blocking” the computer, informing the user that, in order to unlock their files, a ransom must be paid.
The payment is made using the digital currency bitcoin (BTC). If the victim does not have bitcoins, the creators of the software provide instructions on how to obtain them.
Like Cryptolocker, the “Critroni” malware creates a pair of public and private “keys,” which are essentially code numbers, which “unlock” the infected computer.
One "key" (public) is stored on the infected system and given to the user freely, without payment. The other "key" (private) is stored on the command and control server (C&C servers) and is given by the perpetrators to the victim to decrypt the files, only after paying the requested and agreed upon amount of money, which is always in the digital currency "bitcoin".
The processes and methods of spreading the above malware are similar to that of the Cryptolocker malware.
Internet users are urged to be particularly careful and take the following protective measures to avoid being infected by the aforementioned malicious software.
Specifically:
- to check and always keep their operating system version updated,
- to create backup copies of their device files at regular intervals, to an external storage medium,
- use security applications, such as antivirus, which must always be up to date and
- not to open links and not to download attached files contained in e-mail messages for which they do not know with certainty the sender and the content of the attached file.
It is recalled that for similar incidents, citizens can contact the Cybercrime Prosecution Directorate at the following contact details:
- By phone at: 210-6476464
- By sending an e-mail to: ccu@cybercrimeunit.gov.gr
