CatB Ransomware Targets Big Game
CatB is a ransomware-type program that encrypts data and demands payment for the decryption. It does not alter filenames, and inserts ransom notes at the beginning of each encrypted file. The notes state that RSA-2048 cryptographic algorithm was used to encrypt the files, and the ransom size depends on how quickly it is paid - 50 BTC (Bitcoin cryptocurrency) on the first day, or 130 BTC on the fourth day. These sums are worth approximately 800 thousand USD and 2 million USD respectively. Victims can test decryption by sending up to three encrypted files to the attackers, but using third-party recovery software may render the data undecryptable.
Exorbitant sums are usually requested when ransomware is leveraged against companies or other large entities with more resources to pay them. However, despite paying - victims often do not receive the promised decryption keys/software, so we advise against meeting these demands as there are no guarantees that you will receive what you need. Removing CatB from your system will prevent it from encrypting more files, but it won't restore already compromised data - only a backup can do that. Therefore, always keep backups in multiple different locations (e.g., remote servers , unplugged storage devices, etc.) to ensure your data safety.
To further protect yourself from ransomware attacks, it is important to keep your operating system and software up-to-date with the latest security patches. Additionally, you should use a reliable anti-malware program that can detect and remove malicious threats before they can cause any damage. It is also recommended to avoid clicking on suspicious links or downloading files from untrusted sources. Finally, be sure to create regular backups of your important data and store them in a secure location.
The ransom note used by CatB reads as follows:
??? What happend???
!!! Your files are encrypted !!!
*All your files are protected by strong encryption with RSA-2048.*
*There is no public decryption software.*
###### Program and private key, What is the price? The price depends on how fast you can pay to us.######
1 day : 50 Bitcoin
2 day : 60 Bitcoin
3 day : 90 Bitcoin
4 day : 130 Bitcoin
5 day : permanent data loss !!!!
Btc Address: bc1qakuel0s4nyge9rxjylsqdxnn9nvyhc2z6k27gz
!!! After received, we will send program and private key to your IT department right now.!!!
*Free decryption As a guarantee, you can send us up to 3 free decrypted files before payment.*
email: catB9991@protonmail.com
!!! Do not attempt to decrypt your data using third-party software, this may result in permanent data loss.!!!
