HackTool.AndroidOS.Wifikill

This malware can disconnect other users from a Wi-Fi network. It sends a large number of packets to a router, making it look as if the packets were sent by the victim. As a result, traffic from the victim is blocked. Traffic modification functionality is contained in an ELF file. ARP spoofing and the iptable class=”most_attacked_countries”.

Geographical distribution of attacks by the HackTool.AndroidOS.Wifikill family

Geographical distribution of attacks during the period from 09 June 2016 to 09 June 2017

Top 10 countries with most attacked users (% of total attacks)

* Percentage among all unique Kaspersky users worldwide attacked by this malware