Malware of this family was first detected during analysis of spam, in messages that encouraged users to click a link in order to learn about a train crash in Spain. Users who clicked the link were taken to a malicious website, from which the user’s computer was infected with a Trojan.
The main purpose of this malware family is to steal user data, such as:
The malware then sends this information to the cybercriminal’s server.
Some malware of this family can download and run other malicious programs.
Geographical distribution of attacks by the Trojan-PSW.Win32.Fareit family
Geographical distribution of attacks during the period from 30 December 2014 to 30 December 2015
Top 10 countries with most attacked users (% of total attacks)
* Percentage among all unique Kaspersky users worldwide attacked by this malware