Doctor Web news

Doctor Web’s October 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in October 2023, adware trojans from the Android.HiddenAds family were most often detected. Their activity increased by 46.16%, compared to the previous month. The second most widespread adware trojans, which belong to the Android.MobiDash family, also increased in number—by 7.07%. In addition, users encountered spyware trojans and banking malware more often—by 18.27% and 10.73%, respectively.

22.11.2023 | Updates | About viruses | Mobile threats | Virus reviews

Summer heat in November: a 40% discount for 3 computers for 2 years!

During autumn sale days, Doctor Web isn’t standing on the sidelines. It’s offering its anti-virus at 40% off. With this discount, you can purchase Dr.Web Security Space to protect 3 computers at once—for 2 years. The promo will run from November 20-26.

20.11.2023 | Dr.Web products | Promos

Doctor Web’s October 2023 virus activity review

An analysis of Dr.Web October detection statistics revealed a 49.73% decrease in the total number of threats detected, compared to September. At the same time, the number of unique threats increased by 12.50%. As before, adware trojans and unwanted adware programs were detected most often. In email traffic, malicious scripts, phishing documents, and apps that exploit vulnerabilities in Microsoft Office documents dominated once again.

17.11.2023 | About viruses | Virus reviews

Update scheduled for Dr.Web vxCube

Doctor Web is updating its Dr.Web vxCube sandbox to introduce error fixes and upgrades. The cloud-based version of the service will be unavailable on October 31 between 09:00 and 10:00 GMT due to the scheduled maintenance.

30.10.2023 | Dr.Web products | Updates

Doctor Web’s September 2023 review of virus activity on mobile devices

In early September, Doctor Web published a study of Android.Pandora.2, a backdoor that creates a botnet of infected devices and can carry out DDoS attacks at the command of threat actors. In the middle of the month, our specialists informed users about malicious programs from the Android.Spy.Lydia family. These multi-functional spyware trojans target Iranian users. Members of this family are camouflaged as a financial platform for online trading; they can perform various malicious actions at the command of attackers. This includes intercepting and sending SMS, collecting information about user phonebook contacts, hijacking clipboard contents, loading phishing websites, and so on. The Android.Spy.Lydia trojans can be used in a variety of fraudulent schemes and to steal personal data. Moreover, with their help, threat actors can steal their victims’ money.

Doctor Web’s September 2023 virus activity review

An analysis of Dr.Web September detection statistics revealed a 0.44% decrease in the total number of threats detected, compared to August. The number of unique threats also decreased— by 11.98%. Adware trojans and adware programs again were among the most popular threats. In email traffic, malicious scripts, phishing documents, and software that exploit vulnerabilities in Microsoft Office documents were detected most often.

26.10.2023 | Dr.Web products | About viruses | Virus reviews

Dr.Web FixIt! scheduled for maintenance on October 12

Doctor Web is rolling out an update for Dr.Web FixIt!—its targeted-attack discovery and analysis service.

11.10.2023 | Dr.Web products | Updates

Dr.Web Security Space now supports macOS Sonoma

On September 26, Apple made the new macOS Sonoma (version 14) available to the general public. With that in mind, Doctor Web is pleased to notify its customers that its Dr.Web Security Space for macOS fully supports this latest major OS release.

28.09.2023 | Dr.Web products | Corporate news

Doctor Web’s August 2023 virus activity review

An analysis of Dr.Web August detection statistics revealed a 4.05% increase in the total number of threats detected, compared to July. The number of unique threats increased by 3.35%. Most often, users encountered adware software. In email traffic, malicious scripts, phishing documents, and programs that exploit vulnerabilities in Microsoft Office documents were most prevalent.

27.09.2023 | Dr.Web products | About viruses | Virus reviews

Doctor Web’s August 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in August 2023, adware trojans from the Android.MobiDash and Android.HiddenAds families were again among the most widespread Android malware. At the same time, the former were detected 72.23% more often, while the activity of the latter decreased by 8.87%, compared to the previous month.

27.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Vulnerability in Openfire messaging software allows unauthorized access to compromised servers

Doctor Web is notifying users about the spread of malicious plugins for the Openfire messaging server. To date, more than 3,000 servers worldwide that have Openfire software installed on them have been affected by a vulnerability that lets hackers gain access to the file system and use the infected servers as part of a botnet.

25.09.2023 | About viruses | Real-time threat news

The art of manipulation: fraudsters steal money with remote administration software for mobile devices

Doctor Web is reporting on the growing number of fraud cases involving remote desktop access applications. RustDesk is the most popular among attackers.

Doctor Web’s July 2023 virus activity review

An analysis of Dr.Web July detection statistics revealed a 5.31% decrease in the total number of threats detected, compared to June. The number of unique threats also decreased—by 17.62%. The majority of detections were again due to adware trojans. In email traffic, malicious scripts, phishing documents, and software that exploit Microsoft Office vulnerabilities were most often encountered.

15.09.2023 | About viruses | Virus reviews

Doctor Web’s July 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in July 2023, users encountered Android.HiddenAds adware trojans 33.48% more often, compared to June. At the same time, adware trojans from the Android.MobiDash were detected 24.11% less often. The number of spyware trojan attacks decreased by 2.81%, compared to the previous month. In contrast, the activity of banking trojans increased by 2.31%, while the activity of ransomware from the Android.Locker family increased by 8.53%.

15.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Android.Spy.Lydia trojans masquerade as an Iranian online trading platform

Doctor Web has detected new versions of the Android.Spy.Lydia trojans, which engage in a variety of spyware activities on infected Android devices and provide attackers with remote control capabilities to steal personal information and funds. Moreover, the trojans have a defense mechanism that checks whether they are being launched in an emulator or on a test device. In such cases, the trojans stop working.

13.09.2023 | Updates | About viruses | Mobile threats | Real-time threat news

Pandora's box is now open: the well-known Mirai trojan arrives in a new disguise to Android-based TV sets and TV boxes

Doctor Web has identified a family of Android.Pandora trojans that compromise Android devices, either during firmware updates or when applications for viewing pirated video content are installed. This backdoor inherited its advanced DDoS-attack capabilities from its ancestor, the well-known Linux.Mirai trojan.

06.09.2023 | About viruses | Real-time threat news

Doctor Web’s June 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in June 2023, the activity of Android.HiddenAds adware trojans increased by 10.93%. At the same time, adware trojans from the Android.MobiDash family were detected 15.94% less often on protected devices. Compared to May, the number of spyware trojan and banking malware attacks decreased by 47.15% and 12.23%, respectively. In addition, users encountered ransomware malware from the Android.Locker family 46.30% more often.

06.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web’s June 2023 virus activity review

An analysis of Dr.Web June detection statistics revealed a 5.40% decrease in the total number of threats detected, compared to May. At the same time, the number of unique threats increased by 21.37%. Among the most common threats were various adware apps and trojans distributed as part of other malware. In email traffic, phishing PDF documents dominated once again.

06.09.2023 | About viruses | Virus reviews

A tool for detecting targeted attacks—Dr.Web FixIt! 2.3: Faster and more convenient

Doctor Web is updating Dr.Web FixIt!, its unparalleled tool for detecting targeted attacks. Working with service reports has become even more convenient.

28.08.2023 | Dr.Web products | Updates

Doctor Web anti-virus laboratory chief spoke on the evolution of Android malware at a cybersecurity forum in China

Doctor Web took part in the cybersecurity summit and international anti-virus conference in Tianjin, China. Igor Zdobnov, anti-virus laboratory chief, represented the company at the event.

28.08.2023 | Dr.Web products | Corporate news

Fruity trojan downloader performs multi-stage infection of Windows computers

Doctor Web has uncovered an attack on Windows users involving a modular downloader trojan dubbed Trojan.Fruity.1. With its help, threat actors can infect computers with different types of malware, depending on the attackers’ goals. To conceal an attack and increase the chances of it being successful, they use a variety of tricks. These include a multi-stage infection process for target systems, using harmless apps for launching components of the trojan, and trying to bypass anti-virus protection.

27.07.2023 | About viruses | Real-time threat news

Doctor Web to participate in the second summit of the Russia-Africa Economic and Humanitarian Forum

Doctor Web, a leading Russian developer of anti-virus solutions, will take part in the IT cluster of the second Russia-Africa Economic and Humanitarian Forum, which will take place in St. Petersburg at the ExpoForum Convention and Exhibition Centre on 27–28 July.

17.07.2023 | Corporate news

Full support period extended for Dr.Web products

Doctor Web has extended full support for its latest Dr.Web product releases by one year—until June 30, 2024.

03.07.2023 | Dr.Web products

Doctor Web’s May 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in May 2023, the activity of adware trojans from the Android.HiddenAds and Android.MobiDash families decreased by 9.04% and 6.3% respectively. At the same time, the number of spyware trojan attacks increased by 120.53%. Most often, users encountered Android.Spy.5106, a spy built into some unofficial WhatsApp messenger mods. Compared to the previous month, the number of banking trojan attacks decreased by 55.33%, while the number of ransomware malware attacks decreased by 28.26%.

28.06.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web’s May 2023 virus activity review

An analysis of Dr.Web May detection statistics revealed a 1.24% increase in the total number of threats detected on protected devices, compared to April. At the same time, the number of unique threats decreased by 8.25%. Users most often encountered adware software and trojan applications from various families. PDF documents used in phishing attacks were distributed on a massive scale in email traffic. Moreover, threat actors used email to spread malicious scripts and software that exploit Microsoft Office vulnerabilities.

28.06.2023 | Dr.Web products | About viruses | Virus reviews