Doctor Web news

Dr.Web Security Space now supports macOS Sonoma

On September 26, Apple made the new macOS Sonoma (version 14) available to the general public. With that in mind, Doctor Web is pleased to notify its customers that its Dr.Web Security Space for macOS fully supports this latest major OS release.

28.09.2023 | Dr.Web products | Corporate news

Doctor Web’s August 2023 virus activity review

An analysis of Dr.Web August detection statistics revealed a 4.05% increase in the total number of threats detected, compared to July. The number of unique threats increased by 3.35%. Most often, users encountered adware software. In email traffic, malicious scripts, phishing documents, and programs that exploit vulnerabilities in Microsoft Office documents were most prevalent.

27.09.2023 | Dr.Web products | About viruses | Virus reviews

Doctor Web’s August 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in August 2023, adware trojans from the Android.MobiDash and Android.HiddenAds families were again among the most widespread Android malware. At the same time, the former were detected 72.23% more often, while the activity of the latter decreased by 8.87%, compared to the previous month.

27.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Vulnerability in Openfire messaging software allows unauthorized access to compromised servers

Doctor Web is notifying users about the spread of malicious plugins for the Openfire messaging server. To date, more than 3,000 servers worldwide that have Openfire software installed on them have been affected by a vulnerability that lets hackers gain access to the file system and use the infected servers as part of a botnet.

25.09.2023 | About viruses | Real-time threat news

The art of manipulation: fraudsters steal money with remote administration software for mobile devices

Doctor Web is reporting on the growing number of fraud cases involving remote desktop access applications. RustDesk is the most popular among attackers.

Doctor Web’s July 2023 virus activity review

An analysis of Dr.Web July detection statistics revealed a 5.31% decrease in the total number of threats detected, compared to June. The number of unique threats also decreased—by 17.62%. The majority of detections were again due to adware trojans. In email traffic, malicious scripts, phishing documents, and software that exploit Microsoft Office vulnerabilities were most often encountered.

15.09.2023 | About viruses | Virus reviews

Doctor Web’s July 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in July 2023, users encountered Android.HiddenAds adware trojans 33.48% more often, compared to June. At the same time, adware trojans from the Android.MobiDash were detected 24.11% less often. The number of spyware trojan attacks decreased by 2.81%, compared to the previous month. In contrast, the activity of banking trojans increased by 2.31%, while the activity of ransomware from the Android.Locker family increased by 8.53%.

15.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Android.Spy.Lydia trojans masquerade as an Iranian online trading platform

Doctor Web has detected new versions of the Android.Spy.Lydia trojans, which engage in a variety of spyware activities on infected Android devices and provide attackers with remote control capabilities to steal personal information and funds. Moreover, the trojans have a defense mechanism that checks whether they are being launched in an emulator or on a test device. In such cases, the trojans stop working.

13.09.2023 | Updates | About viruses | Mobile threats | Real-time threat news

Pandora's box is now open: the well-known Mirai trojan arrives in a new disguise to Android-based TV sets and TV boxes

Doctor Web has identified a family of Android.Pandora trojans that compromise Android devices, either during firmware updates or when applications for viewing pirated video content are installed. This backdoor inherited its advanced DDoS-attack capabilities from its ancestor, the well-known Linux.Mirai trojan.

06.09.2023 | About viruses | Real-time threat news

Doctor Web’s June 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in June 2023, the activity of Android.HiddenAds adware trojans increased by 10.93%. At the same time, adware trojans from the Android.MobiDash family were detected 15.94% less often on protected devices. Compared to May, the number of spyware trojan and banking malware attacks decreased by 47.15% and 12.23%, respectively. In addition, users encountered ransomware malware from the Android.Locker family 46.30% more often.

06.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web’s June 2023 virus activity review

An analysis of Dr.Web June detection statistics revealed a 5.40% decrease in the total number of threats detected, compared to May. At the same time, the number of unique threats increased by 21.37%. Among the most common threats were various adware apps and trojans distributed as part of other malware. In email traffic, phishing PDF documents dominated once again.

06.09.2023 | About viruses | Virus reviews

A tool for detecting targeted attacks—Dr.Web FixIt! 2.3: Faster and more convenient

Doctor Web is updating Dr.Web FixIt!, its unparalleled tool for detecting targeted attacks. Working with service reports has become even more convenient.

28.08.2023 | Dr.Web products | Updates

Doctor Web anti-virus laboratory chief spoke on the evolution of Android malware at a cybersecurity forum in China

Doctor Web took part in the cybersecurity summit and international anti-virus conference in Tianjin, China. Igor Zdobnov, anti-virus laboratory chief, represented the company at the event.

28.08.2023 | Dr.Web products | Corporate news

Fruity trojan downloader performs multi-stage infection of Windows computers

Doctor Web has uncovered an attack on Windows users involving a modular downloader trojan dubbed Trojan.Fruity.1. With its help, threat actors can infect computers with different types of malware, depending on the attackers’ goals. To conceal an attack and increase the chances of it being successful, they use a variety of tricks. These include a multi-stage infection process for target systems, using harmless apps for launching components of the trojan, and trying to bypass anti-virus protection.

27.07.2023 | About viruses | Real-time threat news

Doctor Web to participate in the second summit of the Russia-Africa Economic and Humanitarian Forum

Doctor Web, a leading Russian developer of anti-virus solutions, will take part in the IT cluster of the second Russia-Africa Economic and Humanitarian Forum, which will take place in St. Petersburg at the ExpoForum Convention and Exhibition Centre on 27–28 July.

17.07.2023 | Corporate news

Full support period extended for Dr.Web products

Doctor Web has extended full support for its latest Dr.Web product releases by one year—until June 30, 2024.

03.07.2023 | Dr.Web products

Doctor Web’s May 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in May 2023, the activity of adware trojans from the Android.HiddenAds and Android.MobiDash families decreased by 9.04% and 6.3% respectively. At the same time, the number of spyware trojan attacks increased by 120.53%. Most often, users encountered Android.Spy.5106, a spy built into some unofficial WhatsApp messenger mods. Compared to the previous month, the number of banking trojan attacks decreased by 55.33%, while the number of ransomware malware attacks decreased by 28.26%.

28.06.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web’s May 2023 virus activity review

An analysis of Dr.Web May detection statistics revealed a 1.24% increase in the total number of threats detected on protected devices, compared to April. At the same time, the number of unique threats decreased by 8.25%. Users most often encountered adware software and trojan applications from various families. PDF documents used in phishing attacks were distributed on a massive scale in email traffic. Moreover, threat actors used email to spread malicious scripts and software that exploit Microsoft Office vulnerabilities.

28.06.2023 | Dr.Web products | About viruses | Virus reviews

Doctor Web’s interactive sandbox Dr.Web vxCube to be updated on June 28

The cloud-based version of Dr.Web vxCube will be unavailable on June 28 between 10 a.m. and 11 a.m. GMT due to scheduled maintenance.

27.06.2023 | Dr.Web products | Updates

Enhance your UTM and NGFW solutions with the Dr.Web anti-virus engine

Today, UTM (Unified Threat Management) and NGFW (next-generation firewall) solutions strive to provide continuous comprehensive protection from network threats. Effective traffic scanning and filtering can be achieved by integrating an anti-virus engine into the security software, so that malicious files can be detected in the traffic controlled by your UTM or NGFW solution.

26.06.2023 | Dr.Web products | Corporate news

Check how well protected you are: Doctor Web launches its Dr.Web FixIt! cloud service

Doctor Web has released Dr.Web FixIt! — a new solution for ensuring the information security of PCs running Microsoft Windows.

19.06.2023 | Dr.Web products | Corporate news

Doctor Web’s April 2023 virus activity review

An analysis of Dr.Web April detection statistics revealed a 2.08% decrease in the total number of threats detected on protected devices, compared to March. The number of unique threats also decreased—by 17.40%. Among them, adware and trojans from different families were again the most active. In email traffic, malicious scripts and PDF documents used in phishing attacks prevailed.

14.06.2023 | About viruses | Virus reviews

Doctor Web’s April 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in April 2023, users encountered Android.HiddenAds adware trojans 16.13% less often, but Android.MobiDash adware trojans 40.42% more often, than in March. At the same time, this type of Android malware remains one of the most common threats for the Android platform.

14.06.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web identifies pirated Windows builds with crypto stealer that penetrates EFI partition

Doctor Web has discovered a malicious clipper program in a number of unofficial Windows 10 builds that cybercriminals have been distributing via a torrent tracker. Dubbed Trojan.Clipper.231, this trojan app substitutes crypto wallet addresses in the clipboard with addresses provided by attackers. As of this moment, malicious actors have managed to steal cryptocurrency in an amount equivalent to about $19,000 US.

13.06.2023 | Dr.Web products | About viruses | Real-time threat news

An anti-bootkit module, new behaviour analysis routines and upgrades galore in updated Dr.Web 12.0 for Windows and Dr.Web 12.0 for Windows Server

Russian anti-virus company Doctor Web is pleased to present its updated Dr.Web 12.0 for Windows and Dr.Web 12.0 for Windows Server, which introduce new anti-virus security features and upgraded old ones. The applications boast improved stability and more robust system protection.

05.06.2023 | Updates