Backdoor.Win32.Androm

Detect Date 09/29/2015
Class Backdoor
Platform Win32
Description

Andromeda bot. As it runs, Backdoor.Win32.Androm communicates with control servers and receives a set of commands to perform. The capabilities of the backdoor can be expanded via downloadable modules. This bot is often used to load other malware onto the infected computer.

Geographical distribution of attacks by the Backdoor.Win32.Androm family

Andromeng

Geographical distribution of attacks during the period from 27 September 2014 to 27 September 2015

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Germany 14.98
2 Russia 9.89
3 India 7.70
4 Italy 5.86
5 Vietnam 5.40
6 USA 2.96
7 Turkey 2.68
8 Austria 2.30
9 Indonesia 1.72
10 Bangladesh 1.64

* Percentage among all unique Kaspersky Lab users worldwide who were attacked by this malware