Trojan-Downloader.MSOffice.SLoad

Detect Date 01/20/2017
Class Trojan-Downloader
Platform MSOffice
Description

This .doc/.docx document contains a script written in VBA (Visual Basic for Applications), which can be run in Microsoft Word. The script contains procedures for establishing a connection as well as downloading, saving, and running a file. The downloaded malware is most often ransomware that encrypts user data.

Geographical distribution of attacks by the Trojan-Downloader.MSOffice.SLoad family


Geographical distribution of attacks during the period from 20 January 2016 to 20 January 2017

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Italy 16.58
2 Germany 8.37
3 USA 7.21
4 Australia 5.16
5 United Kingdom 4.22
6 Japan 4.13
7 Russian Federation 3.24
8 Switzerland 3.00
9 Poland 2.95
10 Canada 2.92

* Percentage among all unique Kaspersky Lab users worldwide attacked by this malware