CatB Ransomware Exploits MSDTC Service to Steal Data

According to researchers at SentinelOne, the gang has lately shifted to DLL hijacking via Microsoft Distributed Transaction Coordinator (MSDTC) to extract and launch ransomware payloads.