Dtrack Malware Affects over 15 Indian States : Kaspersky Report

Kaspersky researchers have disclosed that they have constitute samples of malware called "Dtrack" from enterprises in Bharat. Dtrack is a Remote Admission Trojan (RAT) capable of recording your keystrokes, retrieving browser history, uploading or downloading files and much more.

According to contempo reports, Dtrack malware is prevalent across Indian states including Maharashtra, Karnataka, and Telangana. The researchers got over 180 malware samples in which about 24 percentage were establish in Maharashtra while the values stand at 18.v percent in Karnataka and 12 percent in Telangana. Dtrack has also affected other states like West Bengal, Uttar Pradesh, Tamil Nadu, Delhi, and Kerala besides.

"The vast amount of Dtrack samples that we were able to notice shows that the Lazarus grouping is one of the most agile APT groups in terms of malware evolution. We first saw early on samples of this malware family in 2013, when it hit Seoul. Now, 6 years later, nosotros see them in Bharat, attacking financial institutions and research centers.", wrote Konstantin Zykov, Kaspersky's Security Researcher in a malware description post.

Information technology is worth noting that Kaspersky researchers had discovered a like malware last year named ATMDtrack, a malware targeting ATM credentials. Moreover, Dtrack got uncovered while the researchers conducted further studies regarding the functional behavior of ATMDtrack.

The group behind ATMDtrack is behind Dtrack malware likewise, according to Kaspersky's findings. "A command-and-command transport protocol custom implementation is the same for both campaigns. Because of these discoveries, we are quite confident that Dtrack is tied to the Lazarus Grouping," said Mr. Zykov.

The Russian cybersecurity firm says that weak network security policies, countersign policies and a lack of traffic monitoring make enterprises an easy target for Dtrack. To prevent Dtrack attacks, Kaspersky advises enterprises to tighten their network & password policies, and to use traffic monitoring and antivirus solutions.