Early September 2019 witnessed the last detected activity of the Dtrack.

Researchers believe that a part of the old code was reused in the attacks against Indian financial sectors.

This newly discovered malware is active and is still used in cyberattacks, Kaspersky “When such malwares are executed successfully it proves that even when a threat seems to disappear, it can be resurrected in a different guise to attack new targets” said research.

The malware can list all available files and running processes, key logging, browser history and host IP addresses – including information about available networks and active connections.

Organizations targeted by threat actors using the Dtrack remote administration tool often have weak network security policies and password standards, while also failing to track traffic across the organisation, said the research.

“Threat actors can perform actions such as uploading and downloading files and executing key processes.”

Dtrack can be used as Remote Admin Tool (RAT), giving threat actors complete control over infected devices.

The newly-discovered malware is “active and based on Kaspersky telemetry”, and is still used in “cyberattacks” said the research. The other infected states include West Bengal, Uttar Pradesh, Tamil Nadu, Delhi and Kerala, said the firm, explaining that Dtrack is a spy tool which had been spotted in Indian financial institutions and research centres last year. The maximum ‘Dtrack’ samples were found in Maharashtra (24%) followed by Karnataka (18.5%) and Telangana (12%). Maharashtra is in the top in the list of 18 Indian states where samples of “Dtrack” malware. Researchers discovered the Dtrack spy tool when they were analysing the ATMDtrack malware that was targeting Indian banks. ATMDtrack, Cyber Threat, Cyberattacks, Cybersecurity, Dtrack RAT, Financial Institution, Kaspersky, Malware, Real Time Threat, Remote Admin Tool, Research, spywareĭtrack RAT malware targeting Indian financial institutions, recently discovered by Kaspersky is very dominant in terms of malware development and used for cyber attacks specifically on financial institutions like Banks etc.

Kaspersky cybermap