According to IBM X-Force Research published Thursday, Latvia is Dridex's second most-targeted country following the US.
Dridex currently targets over 20 Latvian banks, three banks in Estonia, three in Lithuania and one in Ukraine. Targeting such countries is quite uncommon for any banking Trojan, according to IBM X-Force.
In countries where only a single bank is targeted, Dridex developers could be moving money to and from these banks rather than stealing from them, said IBM X-Force.
The malware spreads by via emails with infected .doc and .xls files attached. It steals money from the victims' bank accounts.
According to the Commercial Banking Association, there were 24 banks in Latvia in Q2 2016.
