Netskope Threat Labs

CTBLocker

ATP Sandbox Adv. HeuristicsAV

CTBLocker is a ransomware family known for sophisticated encryption of victim files, and later crews incorporated its brand into ransomware as a service offerings that shook up the affiliate market.

First seen
April 2022
Last seen
October 2026
Alert Name
ByteCode-MSIL.Ransomware.CTBLocker
Gen:Variant.Ransom.CTBLocker.11
Gen:Variant.Ransom.CTBLocker.8
Trojan.CTBLocker.Gen.1
Trojan.CTBLocker.N
Win32.Ransomware.CTBLocker
Win32.Trojan.CTBLocker