Detect Date 06/03/2016
Class Trojan-Banker
Platform Win32

Malicious programs of this family, also known as Ranbyus, were originally created by cybercriminals to take control of BIFIT iBank 2, one of the most popular online banking programs in Commonwealth of Independent States (CIS) countries. Later, the cybercriminals added support for other online banking clients to the malware family.

Geographical distribution of attacks by the Trojan-Banker.Win32.Fibbit family

Geographical distribution of attacks during the period from 03 June 2015 to 03 June 2016

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Russian Federation 62.74
2 Kazakhstan 2.70
3 Austria 2.46
4 Uzbekistan 2.46
5 India 2.42
6 Germany 2.38
7 Ukraine 2.25
8 USA 2.05
9 Japan 1.64
10 South Africa 1.52

* Percentage among all unique Kaspersky users worldwide attacked by this malware

Find out the statistics of the threats spreading in your region