Latest Virus and Malware

F-Secure Malware Descriptions

1. Rootkit:W32/ZAccess
   Rootkit:W32/ZAccess constantly displays advertisements on the infected machine and may silently contact remote servers to retrieve additional advertising information.
2. Backdoor:OSX/DevilRobber.A
   Backdoor:OSX/DevilRobber.A silently installs applications related to Bitcoin-mining; it may also harvest data from the infected machine and listen for additional commands from a remote user.
3. Backdoor:OSX/Tsunami.A
   Backdoor:OSX/Tsunami.A is a distributed denial-of-service (DDoS) flooder that is also capable of downloading files and executing shell commands in an infected system.
4. Trojan-Downloader:OSX/Flashback.C
   Trojan-Downloader:OSX/Flashback.C poses as a Flash Player installer and connects to a remote host to obtain further installation files and configuration.
5. Trojan-Downloader:OSX/Flashback.B
   Trojan-Downloader:OSX/Flashback.B poses as a Flash Player installer, and connects to a remote host to obtain further installation configuration and files.
6. Trojan-Dropper:OSX/Revir.B
   Trojan-Dropper:OSX/Revir.B drops and executes a backdoor program onto the system, while camouflaging its activity by opening a JPG file to distract the user.
7. Monitoring-Tool:Android/SimChecker.A
   Monitoring-Tool:Android/SimChecker.A collects geolocation and other device information, and sends out this information via SMS messages and e-mails.
8. Trojan-Downloader:OSX/Flashback.A
   Trojan-Downloader:OSX/Flashback.A poses as a Flash Player installer, and connects to a remote host to obtain further installation configuration and files.
9. Backdoor:OSX/Imuler.A
   Backdoor:OSX/Imuler.A contacts a remote server for instructions; it may then steal files or capture a screenshot of the infected computer system, which is then forwarded to the remote server.
10. Trojan-Dropper:OSX/Revir.A
    Trojan-Dropper:OSX/Revir.A drops a downloader component that downloads a backdoor program onto the system, while camouflaging its activity by opening a PDF file to distract the user.
11. Worm:W32/Morto.A
    Worm:W32/Morto.A propagates through Remote Desktop Services on Windows servers by brute-forcing the login credentials of the server.
12. Trojan:Android/GinMaster.A
    Trojan:Android/GinMaster.A steals confidential information from the device and sends it to a remote website.
13. Trojan:W32/Yakes
    Trojan:W32/Yakes variants attempt to connect to and download files from remote servers.
14. Trojan:Android/DroidKungFu.C
    Trojan:Android/DroidKungFu.C forwards confidential details to a remote server.
15. Trojan:Android/AutoSPSubscribe.A
    Trojan:Android/AutoSPSubscribe.A is a malicious app that targets Android users in China, and is distributed through unofficial markets.
16. Trojan:BASH/QHost.WB
    Trojan:BASH/QHost.WB hijacks web traffic by modifying the hosts.
17. Trojan:Android/YZHCSMS.A
    Trojan:Android/YZHCSMS.A sends SMS/MMS messages to premium rate numbers, potentially incurring unexpected/unwanted usage charges.
18. Monitoring-Tool:Android/SpyBubble.A
    Monitoring-Tool:Android/SpyBubble.A is a commercially available tracking tool.
19. Trojan:Android/BaseBridge.A
    Trojan:Android/BaseBridge.A forwards confidential details to a remote server.
20. Spyware:Android/Flexispy.K
    Spyware:Android/Flexispy.K is a commercially available monitoring program.
21. Rogue:OSX/FakeMacDef.A
    Dishonest antivirus software which tricks users into buying or installing it, usually by infecting a user's computer, or by pretending the computer is infected.
22. Trojan:W32/Murofet.A
    This trojan attempts to download a file (presumably malicious) from a randomly generated domain.
23. Virus:W32/Ramnit.N
    A program that secretly and maliciously integrates itself into program or data files. It spreads by integrating itself into more files each time the host program is run.
24. Backdoor:W32/Knockex.A
    A remote administration utility that bypasses normal security mechanisms to secretly control a program, computer or network.
25. Trojan-Downloader:W32/Kazy-17907
    This type of trojan secretly downloads malicious files from a remote server, then installs and executes the files.