"Once launched with administrator privileges, the Trojan loads into the memory of its process files containing cybercriminals' demands"
This sounds like it needs to run as root, is there any vulnerability involved and do I need to patch things?
Is it just a particularly crazy spam campaign that would somehow trick "website administrators" into running malware as root on their servers?
"Dr.Web Office Control access restriction system: Restricts or completely prohibits access to Internet resources and removable devices, and therefore, excludes the possibility of a virus invading via those sources."
"Users should only have access to the local resources they require to perform their jobs. It's no use trying to convince staff that flash drives are dangerous. It is much easier to centrally disable access to such devices."
If they are clever they would attack via wordpress and other systems that are unpatched and give shell access.