HackTool.AndroidOS.Wifikill

Detect Date 06/09/2017
Class HackTool
Platform AndroidOS
Description

This malware can disconnect other users from a Wi-Fi network. It sends a large number of packets to a router, making it look as if the packets were sent by the victim. As a result, traffic from the victim is blocked. Traffic modification functionality is contained in an ELF file. ARP spoofing and the iptable class=”most_attacked_countries”.

Geographical distribution of attacks by the HackTool.AndroidOS.Wifikill family


Geographical distribution of attacks during the period from 09 June 2016 to 09 June 2017

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Russian Federation 32.57
2 India 8.18
3 Iran 4.80
4 Algeria 3.74
5 Indonesia 3.63
6 Egypt 2.94
7 USA 2.64
8 Ukraine 2.56
9 Mexico 2.54
10 Brazil 2.07

* Percentage among all unique Kaspersky users worldwide attacked by this malware