Trojan.Win32.Neurevt

Detect Date 06/28/2016
Class Trojan
Platform Win32
Description

Trojan.Win32.Neurevt is a multifunctional Trojan written in C++. Also known as Betabot.

The Trojan uses rootkit technology to hide its presence in the operating system, injects code into all running processes, blocks some anti-virus software, and can spread via USB flash drives. The Trojan can also monitor and block installation of other common Trojans, perform DDoS attacks, intercept and spoof user traffic, grab passwords from applications using FTP, POP3, and SSH, spoof DNS requests, find and send files of interest on the computer to the cybercriminal, and create a SOCKS proxy server.

Geographical distribution of attacks by the Trojan.Win32.Neurevt family

Geographical distribution of attacks during the period from 30 May 2015 to 30 May 2016

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Russian Federation 22.44
2 Taiwan 6.89
3 United Arab Emirates 6.16
4 Turkey 5.32
5 India 4.35
6 Germany 4.02
7 Iran 3.08
8 Algeria 2.91
9 Brazil 2.75
10 Hong Kong 2.53

* Percentage among all unique Kaspersky Lab users worldwide who were attacked by this malware