October 1, 2025 According to statistics collected by the Dr.Web anti-virus, the total number of threats detected in the third quarter of 2025 decreased by 4.23%, compared to the second quarter. The number of unique threats increased by 2.17%. Among the most commonly detected threats were unwanted adware software, ad-displaying trojans, and malicious scripts. Email traffic was dominated by malicious scripts, backdoors, and various trojans, including downloaders, droppers, and password stealers...| All the news
October 1, 2025 According to detection statistics collected by Dr.Web Security Space for mobile devices, Android.MobiDash ad-displaying trojans were the most widespread threats of Q3 2025. They were detected on protected devices 18.19% more often than during the previous observation period. The adware trojans Android.HiddenAds, whose activity decreased for the second quarter in a row, fell to second place. In the past 3 months, users encountered them 71.85% less often. These malicious apps co...| All the news
In the run-up to the new school year, Doctor Web has prepared a special offer: purchase Dr.Web Security Space to protect 2 computers for 2 years at 25% off, and get a unique promo code for 50% off your purchase of the Dr.Web Family Security mobile application for 1 parent device and 5 dependent devices. The promo runs through September 4.| Dr.Web
August 20, 2025 Doctor Web is informing users about Android.Backdoor.916.origin, a multi-functional backdoor that spreads in the wild and targets Russian businesses. The malware is capable of executing multiple commands received from attackers and has rich functionality for espionage and data theft. Among other capabilities, it can listen to conversations, broadcast from a device’s camera, steal content from messengers and browsers, and use its keylogger functionality to hijack entered text...| All the news
August 7, 2025 Doctor Web has released an updated version of its Antivirus Dr.Web Light for Android: 12.2.6. The product now supports Android OS version 16. It also has an updated antivirus engine, more efficient threat-detection capabilities, and faster scanning speeds. A number of internal changes were also made to the application to improve its performance. Please note that if you installed the previous version of Dr.Web Light for Android from Doctor Web's site, you will need to uninstall ...| All the news
Download PDF July 24, 2025 Doctor Web’s virus laboratory has detected Trojan.Scavenger—a family of malicious apps that threat actors use to steal confidential data from crypto wallets and password managers from Windows users. Threat actors chain together several trojans from this family, exploiting DLL Search Order Hijacking vulnerabilities to execute their payloads and exfiltrate data. Introduction In 2024, the company Doctor Web investigated an information security incident, involving a...| All the news
July 2, 2025 Why is this better than a free one-month trial? The reason is simple: you're getting a 2-month license that does include technical support. Visit the promo page to get the test drive and stop worrying about trojans, hackers and fraudulent sites. Once the 60-day test drive is over, you will be able to continue using the product for another 12 months for just $31. Dr.Web Security Space for desktops and laptops is available for Windows, macOS and Linux.| All the news
July 1, 2025 According to detection statistics collected by Dr.Web Security Space for mobile devices, adware trojans from various families remained the most common malware. Members of the Android.HiddenAds trojan family were again the most active, despite the fact that users encountered them 8.62% less often. These were followed by Android.MobiDash adware trojans; the number of attacks involving them increased by 11.17%. Android.FakeApp malicious programs, used in various fraudulent schemes, ...| All the news
July 1, 2025 According to statistics collected by the Dr.Web anti-virus, the total number of threats detected in the second quarter of 2025 decreased by 7.38%, compared to the first quarter. At the same time, the number of unique threats decreased by 23.10%. Unwanted adware apps, backdoors, ad-displaying trojans, and malicious scripts were among the threats most commonly detected on protected devices. In email traffic, most frequently detected were trojan downloaders, various malicious script...| All the news
June 30, 2025 Doctor Web is updating its interactive file analysis sandbox Dr.Web vxCube. The changes will apply to both the cloud-based and on-premise versions. Key innovations: Windows 11 available as a VM operating system for analysis Scanning TLS traffic generated by samples being examined Visual representation of PCAP file contents Thanks to its MITM (man-in-the-middle) analysis feature, Dr.Web vxCube won't just determine the address a test sample is attempting to communicate with; it wi...| All the news
June 9, 2025 Full support has been extended for a number of Dr.Web products in accordance with Doctor Web’s lifecycle policy. The following products and solutions will enjoy full support until June 30, 2026. Dr.Web Desktop Security Suite: Dr.Web 12.0 for Windows desktops and laptops Dr.Web 12.0 for macOS Dr.Web 11.1 for Linux desktops and laptops Dr.Web Katana Business Edition 1.0 Dr.Web Server Security Suite: Dr.Web 12.0 for Windows Server Dr.Web 11.1 for Unix-based servers Dr.Web 12.0 for...| All the news
April 22, 2025 An antivirus security company Doctor Web continues its steady expansion overseas as it gains a foothold on the booming Indonesian market. Indonesia’s IT industry is growing rapidly, and reliable information security solutions are in high demand. Dr.Web products are popular in many countries across the globe because of their effectiveness and the wide range of features they offer customers. Doctor Web’s solutions meet the needs of both small businesses and large organization...| All the news
April 21, 2025 Doctor Web’s experts have discovered Android.Spy.1292.origin, spyware whose main target is Russian military personnel. The attackers hide this trojan inside modified Alpine Quest mapping software and distribute it in various ways, including through one of the Russian Android app catalogs. Among other things, the malware sends the attackers phonebook contact information and the infected device’s geolocation. Moreover, this spyware collects data about the files stored on the ...| All the news
April 18, 2025 Users of Dr.Web Enterprise Security Suite (ESS) are strongly recommended to promptly upgrade the product to version 13. Switching to the new version will provide you with full protection and regular updates for the antivirus components. Beginning January 30, 2024, support for Dr.Web Enterprise Security Suite version 12 was reduced. This means that the antivirus component updates for ESS version 12 can be discontinued at any time without additional notification, and the regular ...| All the news
April 15, 2025 On April 15, 2025, a special promo is starting for users who have purchased Dr.Web Security Space licenses before September 1, 2024. Renew your license and receive a unique promo code that will allow you to purchase Dr.Web Security Space for mobile devices at 50% off. Who can participate in the promo? All users who have a valid Dr.Web Security Space license that was purchased on or before August 31, 2024, are eligible for the promo. There are no restrictions on the number of pr...| All the news
April 15, 2025 Doctor Web is starting a new promo campaign that runs through December 31, 2025: purchase Dr.Web Security Space for mobile devices and Dr.Web Family Security—the app that will help you keep your children and other family members safe in the digital world—and get 10% off! This offer applies to one-time purchases of both products. It will allow you to work and relax safely with your Android gadget and ensure that your loved ones will never be in danger while using their mobil...| All the news
April 14, 2025 Every year, cryptocurrencies become more and more common as a payment method. According to the data for 2023, in developed countries about 20% of the population has at some time used such a means of payment, and in developing countries, where the banking sector does not meet the needs of the population, the number of cryptocurrency users is even higher. In cryptocurrency adoption rankings, Russia is among the top ten countries in terms of number of users. Anonymity, fast transa...| All the news
April 7, 2025 Version 2.0 is the latest release of Dr.Web Katana. This software product acts as an auxiliary antivirus "shield" and incorporates Doctor Web’s most advanced preventive protection technologies in order to augment the security provided by other vendors’ solutions. Dr.Web Katana protects user files from encryption ransomware and blocks active threats, including zero-day vulnerability exploits and malicious programs that evade signature-based detection. To address all of today...| All the news
April 1, 2025 Modern IT infrastructures increasingly rely on container technologies, including Docker. These lightweight, standalone packages for running a variety of applications are valued for their effectiveness and easy integration with infrastructures. Such containers simplify application development, testing, and deployment; they offer exceptional scalability and allow companies to reduce their update release cycle. However, companies often use third-party images as templates for creati...| All the news
In 2023, Doctor Web’s experts started an investigation into a targeted attack on a Russian engineering company, the results of which we reported in a corresponding study. Apparently, cybercriminals are very interested in the corporate secrets of this enterprise, so two years later they decided to attack it again. The threat actors returned with new malware and a persistent desire to penetrate the company’s IT infrastructure—they used several attack vectors in an attempt to infect the ta...| Dr.Web
In October 2023, Doctor Web was contacted by a Russian mechanical-engineering enterprise that suspected malware was on one of its computers. Our specialists investigated this incident and determined that the affected company had encountered a targeted attack. During this attack, malicious actors had sent phishing emails with an attachment containing the malicious program responsible for the initial system infection and installing other malicious instruments in the system.| Dr.Web
