There are many different versions of Andromeda malware, which was first discovered in 2011. The majority of variants use myriad infection methods, including malicious attachments, phishing campaigns, warez sites and illegal download sites. In the most recent version, 2.80, the authors appear to have shifted to a more microscopic approach aimed at the payment card industry. The malware has anti-sandboxing built in to prevent security researchers from analyzing it. As of 3, 2017, data from our X-Force Botnet Report showed that this malware has infected more than 26,000 devices.”]
Source: https://securityintelligence.com/andromeda-a-galaxy-of-pain-coming-to-a-machine-near-you/