CTB-Faker

Aliases: Citroni

First seen
2016-01-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:34:39

Targeted industries: financial-services healthcare-and-pharmaceutical retail-and-hospitality

Context

CTB-Faker, also known as Citroni, is a type of ransomware designed to encrypt files on a victim's computer, demanding payment for decryption. It mainly targets businesses across various industries, posing a significant threat to financial and operational security.

Reports & references

  • id-ransomware.blogspot.com — Ctb Faker Ransomware 008 (report)

External references