Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Emulating the Misleading CatB Ransomware
Malware and Vulnerabilities
April 10, 2025
attackiq
CatB ransomware, also known as CatB99 or Baxtoy, emerged in late 2022 and has gained attention for its use of DLL hijacking via MSDTC to execute its payload. It is suspected to be a rebrand of Pandora ransomware.
Read More
CatB Ransomware
ChamelGang
Microsoft Distributed Transaction Coordinator (MSDTC)
DLL Hijacking
data theft
Publisher
Previous
Sapphire Werewolf Upgrades Arsenal With Amethyst Steale ...
Malware and Vulnerabilities
Next
GOFFEE’s recent attacks: new tools and techniques
Threat Actors