Detect date
07/09/2021
Class
Trojan-Proxy
Platform
Win64

Parent class: TrojWare

Trojans are malicious programs that perform actions which are not authorized by the user: they delete, block, modify or copy data, and they disrupt the performance of computers or computer networks. Unlike viruses and worms, the threats that fall into this category are unable to make copies of themselves or self-replicate. Trojans are classified according to the type of action they perform on an infected computer.

Class: Trojan-Proxy

Trojan-Proxy programs are designed to give malicious users access to a variety of Internet resources via victim computers. These malicious programs are typically used to send out mass spam mailings.

Read more

Platform: Win64

Win64 is a platform on Windows-based operating systems for execution of 32-/64-bit applications. Win64 programs cannot be launched on 32-bit versions of Windows.

Description

Trojans of this family use the user’s connection as a proxy to access network resources without notifying the user. While working, these Trojans pose as Microsoft Windows Update.

Top 10 countries with most attacked users (% of total attacks)

1
India
10.55%
2
Russian Federation
8.11%
3
Brazil
4.78%
4
Malaysia
2.86%
5
Algeria
2.60%
6
Vietnam
2.38%
7
Indonesia
2.32%
8
Saudi Arabia
2.31%
9
Italy
2.26%
10
Philippines
2.23%

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.