CTB-Locker/Critroni Attachment Icon
Thanks to @bartblaze, who provided the new samples, we can see that the changes in this new version of CTB-Locker are an increased ransom payment deadline and language localization changes. In previous version the ransom timer was set for 72 hours, but in this version the timer has been increased to 96 hours. The other change is different language localizations for the ransomware program. The original version allowed you to display the ransom note in either Russian or English. The new version of CTB-Locker has removed the Russian language option and added German, Dutch, and Italian. Screenshots of these new localizations can be found below.
As always, for the latest information on CTB-Locker, please see our CTB Locker and Critroni Ransomware Information Guide and FAQ or visit our CTB-Locker support topic.
Language localization screens:
CTB-Locker Ransomware with English Localization
CTB-Locker Ransomware with German Localization
CTB-Locker Ransomware with Dutch Localization
CTB-Locker Ransomware with Italian Localization