Parent class: Malware
Malicious tools are malicious programs designed to automatically create viruses, worms, or Trojans, conduct DoS attacks on remote servers, hack other computers, etc. Unlike viruses, worms, and Trojans, malware in this subclass does not present a direct threat to the computer it runs on, and the program’s malicious payload is only delivered on the direct order of the user.Read more
Class: HackTool
HackTool programs are used to create new users in the list of permitted system visitors, and to delete information from system logs in order to hide the malicious user’s presence on the system. These programs are also used to analyze and collect network packets to carry out specific malicious actions. Malicious users employ HackTool programs when setting up attacks on local or remote computers.Read more
Platform: AndroidOS
Android is an open-source operating system developed by Google for mobile devices, such as tablets, smartphones, and watches. Based on a Linux kernel and the Dalvik virtual machine (older versions) / Android Runtime environment (newer versions).Description
This malicious application uses ARP spoofing to intercept traffic within a local network. Root access is required for the application to work. The application uses the iptable class="most_attacked_countries". Core functionality related to traffic modification is contained in ELF files.Top 10 countries with most attacked users (% of total attacks)
1
India
13.62%
2
Iran
9.28%
3
USA
7.73%
4
Russian Federation
5.89%
5
Germany
5.41%
6
Algeria
3.67%
7
Brazil
3.57%
8
Mexico
3.48%
9
Egypt
2.80%
10
Italy
2.32%
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!