Malicious objects of this family are distributed as password-protected, self-extracting archives. As a result of a launch by other malware, the malicious object is unpacked and acts maliciously – downloads and launches additional modules, and steals valuable system information.
Geographical distribution of attacks by Trojan.Win32.Phds
Geographical distribution of attacks during the period from 02.06.17 – 02.06.18
Top 10 countries with most attacked users (% of total attacks)
*Percentage among all unique Kaspersky Lab users worldwide attacked by this malware