Trojan-PSW.Win32.Fareit

Detect Date 12/30/2015
Class Trojan-PSW
Platform Win32
Description

Malware of this family was first detected during analysis of spam, in messages that encouraged users to click a link in order to learn about a train crash in Spain. Users who clicked the link were taken to a malicious website, from which the user’s computer was infected with a Trojan.

The main purpose of this malware family is to steal user data, such as:

  • Account data for FTP clients on the infected computer
  • Account data for cloud storage services
  • Browser cookies
  • Account data for mail clients

The malware then sends this information to the cybercriminal’s server.

Some malware of this family can download and run other malicious programs.

Geographical distribution of attacks by the Trojan-PSW.Win32.Fareit family

Geographical distribution of attacks during the period from 30 December 2014 to 30 December 2015

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Germany 12.73
2 Russia 6.30
3 USA 5.75
4 India 5.61
5 United Arab Emirates 4.63
6 Italy 4.45
7 Vietnam 3.82
8 Turkey 3.02
9 United Kingdom 2.84
10 Switzerland 2.37

* Percentage among all unique Kaspersky Lab users worldwide attacked by this malware