Click anywhere to stop


Detect Date 01/20/2017
Class Trojan-Downloader
Platform MSOffice

This .doc/.docx document contains a script written in VBA (Visual Basic for Applications), which can be run in Microsoft Word. The script contains procedures for establishing a connection as well as downloading, saving, and running a file. The downloaded malware is most often ransomware that encrypts user data.

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Italy 16.58
2 Germany 8.37
3 USA 7.21
4 Australia 5.16
5 United Kingdom 4.22
6 Japan 4.13
7 Russian Federation 3.24
8 Switzerland 3.00
9 Poland 2.95
10 Canada 2.92

* Percentage among all unique Kaspersky users worldwide attacked by this malware

Find out the statistics of the threats spreading in your region