An analysis of Dr.Web July detection statistics revealed a 5.31% decrease in the total number of threats detected, compared to June. The number of unique threats also decreased—by 17.62%. The majority of detections were again due to adware trojans. In email traffic, malicious scripts, phishing documents, and software that exploit Microsoft Office vulnerabilities were most often encountered.
The number of user requests to decrypt files affected by encoder trojans decreased by 12.30%, compared to June. The most common encoder was Trojan.Encoder.26996, with a share of 21.61% of all incidents recorded. The second most widespread encoder again was Trojan.Encoder.3953, which accounted for 19.10% of all requests. Third place was taken by Trojan.Encoder.35534, with a share of 3.52%.
New malicious programs were spotted on Google Play in July. Among them were trojans from the Android.Joker and Android.Harly families that subscribe victims to paid services, and a crypto-stealing trojan.
Principal trends in July
- A decrease in the total number of detected threats
- A decrease in the number of user requests to decrypt files affected by encoder trojans
- The distribution of new malware on Google Play
Encryption ransomware
In July, the number of requests to decrypt files affected by encoder trojans decreased by 12.30%, compared to June.
The most common encoders of July:
Dangerous websites
In July, users again encountered various phishing websites that are allegedly associated with banks, oil and gas, and other companies and invite visitors to become investors. Potential victims are asked to provide personal information and then to wait for an “expert” to call them back. The data entered on such resources is sent to third parties and can later be used for fraudulent purposes. Below are the screenshots of one such site.
The visitor is asked to take a test in order to access the “investing platform”:
Next, they are asked to provide personal information, such as their first and last names, email address, and phone number:
When the user confirms the input, the site informs them that their “registration” was successful and that they need to wait for an “expert” to call them.
