Dr.Web — innovative anti-virus technologies. Comprehensive protection from Internet threats.

The art of manipulation: fraudsters steal money with remote administration software for mobile devices

Doctor Web is reporting on the growing number of fraud cases involving remote desktop access applications. RustDesk is the most popular among attackers.

Doctor Web’s July 2023 virus activity review

An analysis of Dr.Web July detection statistics revealed a 5.31% decrease in the total number of threats detected, compared to June. The number of unique threats also decreased—by 17.62%. The majority of detections were again due to adware trojans. In email traffic, malicious scripts, phishing documents, and software that exploit Microsoft Office vulnerabilities were most often encountered.

15.09.2023 | About viruses | Virus reviews

Doctor Web’s July 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in July 2023, users encountered Android.HiddenAds adware trojans 33.48% more often, compared to June. At the same time, adware trojans from the Android.MobiDash were detected 24.11% less often. The number of spyware trojan attacks decreased by 2.81%, compared to the previous month. In contrast, the activity of banking trojans increased by 2.31%, while the activity of ransomware from the Android.Locker family increased by 8.53%.

15.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Android.Spy.Lydia trojans masquerade as an Iranian online trading platform

Doctor Web has detected new versions of the Android.Spy.Lydia trojans, which engage in a variety of spyware activities on infected Android devices and provide attackers with remote control capabilities to steal personal information and funds. Moreover, the trojans have a defense mechanism that checks whether they are being launched in an emulator or on a test device. In such cases, the trojans stop working.

13.09.2023 | Updates | About viruses | Mobile threats | Real-time threat news

Pandora's box is now open: the well-known Mirai trojan arrives in a new disguise to Android-based TV sets and TV boxes

Doctor Web has identified a family of Android.Pandora trojans that compromise Android devices, either during firmware updates or when applications for viewing pirated video content are installed. This backdoor inherited its advanced DDoS-attack capabilities from its ancestor, the well-known Linux.Mirai trojan.

06.09.2023 | About viruses | Real-time threat news

Doctor Web’s June 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in June 2023, the activity of Android.HiddenAds adware trojans increased by 10.93%. At the same time, adware trojans from the Android.MobiDash family were detected 15.94% less often on protected devices. Compared to May, the number of spyware trojan and banking malware attacks decreased by 47.15% and 12.23%, respectively. In addition, users encountered ransomware malware from the Android.Locker family 46.30% more often.

06.09.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web’s June 2023 virus activity review

An analysis of Dr.Web June detection statistics revealed a 5.40% decrease in the total number of threats detected, compared to May. At the same time, the number of unique threats increased by 21.37%. Among the most common threats were various adware apps and trojans distributed as part of other malware. In email traffic, phishing PDF documents dominated once again.

06.09.2023 | About viruses | Virus reviews

A tool for detecting targeted attacks—Dr.Web FixIt! 2.3: Faster and more convenient

Doctor Web is updating Dr.Web FixIt!, its unparalleled tool for detecting targeted attacks. Working with service reports has become even more convenient.

28.08.2023 | Dr.Web products | Updates

Doctor Web anti-virus laboratory chief spoke on the evolution of Android malware at a cybersecurity forum in China

Doctor Web took part in the cybersecurity summit and international anti-virus conference in Tianjin, China. Igor Zdobnov, anti-virus laboratory chief, represented the company at the event.

28.08.2023 | Dr.Web products | Corporate news

Fruity trojan downloader performs multi-stage infection of Windows computers

Doctor Web has uncovered an attack on Windows users involving a modular downloader trojan dubbed Trojan.Fruity.1. With its help, threat actors can infect computers with different types of malware, depending on the attackers’ goals. To conceal an attack and increase the chances of it being successful, they use a variety of tricks. These include a multi-stage infection process for target systems, using harmless apps for launching components of the trojan, and trying to bypass anti-virus protection.

27.07.2023 | About viruses | Real-time threat news

Doctor Web to participate in the second summit of the Russia-Africa Economic and Humanitarian Forum

Doctor Web, a leading Russian developer of anti-virus solutions, will take part in the IT cluster of the second Russia-Africa Economic and Humanitarian Forum, which will take place in St. Petersburg at the ExpoForum Convention and Exhibition Centre on 27–28 July.

17.07.2023 | Corporate news

Full support period extended for Dr.Web products

Doctor Web has extended full support for its latest Dr.Web product releases by one year—until June 30, 2024.

03.07.2023 | Dr.Web products

Doctor Web’s May 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in May 2023, the activity of adware trojans from the Android.HiddenAds and Android.MobiDash families decreased by 9.04% and 6.3% respectively. At the same time, the number of spyware trojan attacks increased by 120.53%. Most often, users encountered Android.Spy.5106, a spy built into some unofficial WhatsApp messenger mods. Compared to the previous month, the number of banking trojan attacks decreased by 55.33%, while the number of ransomware malware attacks decreased by 28.26%.

28.06.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web’s May 2023 virus activity review

An analysis of Dr.Web May detection statistics revealed a 1.24% increase in the total number of threats detected on protected devices, compared to April. At the same time, the number of unique threats decreased by 8.25%. Users most often encountered adware software and trojan applications from various families. PDF documents used in phishing attacks were distributed on a massive scale in email traffic. Moreover, threat actors used email to spread malicious scripts and software that exploit Microsoft Office vulnerabilities.

28.06.2023 | Dr.Web products | About viruses | Virus reviews

Doctor Web’s interactive sandbox Dr.Web vxCube to be updated on June 28

The cloud-based version of Dr.Web vxCube will be unavailable on June 28 between 10 a.m. and 11 a.m. GMT due to scheduled maintenance.

27.06.2023 | Dr.Web products | Updates

Enhance your UTM and NGFW solutions with the Dr.Web anti-virus engine

Today, UTM (Unified Threat Management) and NGFW (next-generation firewall) solutions strive to provide continuous comprehensive protection from network threats. Effective traffic scanning and filtering can be achieved by integrating an anti-virus engine into the security software, so that malicious files can be detected in the traffic controlled by your UTM or NGFW solution.

26.06.2023 | Dr.Web products | Corporate news

Check how well protected you are: Doctor Web launches its Dr.Web FixIt! cloud service

Doctor Web has released Dr.Web FixIt! — a new solution for ensuring the information security of PCs running Microsoft Windows.

19.06.2023 | Dr.Web products | Corporate news

Doctor Web’s April 2023 virus activity review

An analysis of Dr.Web April detection statistics revealed a 2.08% decrease in the total number of threats detected on protected devices, compared to March. The number of unique threats also decreased—by 17.40%. Among them, adware and trojans from different families were again the most active. In email traffic, malicious scripts and PDF documents used in phishing attacks prevailed.

14.06.2023 | About viruses | Virus reviews

Doctor Web’s April 2023 review of virus activity on mobile devices

According to detection statistics collected by Dr.Web for Android, in April 2023, users encountered Android.HiddenAds adware trojans 16.13% less often, but Android.MobiDash adware trojans 40.42% more often, than in March. At the same time, this type of Android malware remains one of the most common threats for the Android platform.

14.06.2023 | Updates | About viruses | Mobile threats | Virus reviews

Doctor Web identifies pirated Windows builds with crypto stealer that penetrates EFI partition

Doctor Web has discovered a malicious clipper program in a number of unofficial Windows 10 builds that cybercriminals have been distributing via a torrent tracker. Dubbed Trojan.Clipper.231, this trojan app substitutes crypto wallet addresses in the clipboard with addresses provided by attackers. As of this moment, malicious actors have managed to steal cryptocurrency in an amount equivalent to about $19,000 US.

13.06.2023 | Dr.Web products | About viruses | Real-time threat news

An anti-bootkit module, new behaviour analysis routines and upgrades galore in updated Dr.Web 12.0 for Windows and Dr.Web 12.0 for Windows Server

Russian anti-virus company Doctor Web is pleased to present its updated Dr.Web 12.0 for Windows and Dr.Web 12.0 for Windows Server, which introduce new anti-virus security features and upgraded old ones. The applications boast improved stability and more robust system protection.

05.06.2023 | Updates

Doctor Web takes corporate anti-virus security to a whole new level

As part of Doctor Web’s continuous effort to deliver higher quality products to its customers, the latest release of its end-point security solution for corporate infrastructures offers improved remote administration features and even more reliable protection for all network nodes and devices.

30.05.2023 | Dr.Web products | Updates

Android apps containing SpinOk module with spyware features installed over 421,000,000 times

Doctor Web discovered an Android software module with spyware functionality. It collects information on files stored on devices and is capable of transferring them to malicious actors. It can also substitute and upload clipboard contents to a remote server. Dubbed Android.Spy.SpinOk in accordance with Dr.Web classification, this module is distributed as a marketing SDK. Developers can embed it into all sorts of apps and games, including those available on Google Play.

Doctor Web’s March 2023 virus activity review

An analysis of Dr.Web March detection statistics revealed a 21.39% increase in the total number of threats detected on protected devices, compared to February. With that, the number of unique threats also increased—by 46.64%. Most often, users encountered adware apps and various trojan applications. In email traffic, malicious scripts and software that exploit vulnerabilities is Microsoft Office were most frequently detected.

17.05.2023 | About viruses | Virus reviews

Licenses sold by AvirKey.com blocked

Anti-virus company Doctor Web has blocked all licenses for Dr.Web products that were purchased by online digital goods store AvirKey.com at a reduced price, using an illegal scheme. Please note that AvirKey.com is not an official partner of our company. To avoid becoming a victim of a fraudulent scheme, do not purchase Dr.Web products on this site.

12.05.2023 | Dr.Web products | Corporate news