Detect Date 06/28/2016
Class Trojan-Banker
Platform Win32

Trojan-Banker.Win32.Dyre is malware designed to steal banking information. Also known as Dyreza. Unusually along banking Trojans, it does not use web injects to modify browser contents. Instead the malware redirects traffic of interest to its own servers. The Trojan was distributed from 2014 to 2016, primarily via other malware (Trojan-Downloader.Win32.Upatre). Trojan-Downloader.Win32.Upatre in turn was spread by means of phishing messages.

Geographical distribution of attacks by the Trojan-Banker.Win32.Dyre family

Geographical distribution of attacks during the period from 28 June 2015 to 28 June 2016

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Malaysia 12.16
2 USA 10.78
3 Turkey 7.10
4 Australia 5.14
5 Canada 5.00
6 Germany 4.60
7 France 4.53
8 India 3.61
9 United Kingdom 3.30
10 Mexico 3.25

* Percentage among all unique Kaspersky users worldwide attacked by this malware

Find out the statistics of the threats spreading in your region