Kovter becomes almost fileless, creates a new file type, and gets some new certificates
Trojan:Win32/Kovter is a well-known click-fraud malware which is challenging to detect and remove because of its file-less persistence on infected PCs.
Research
Explore in-depth research on the latest cybersecurity threats, trends, and defense strategies. Get insights from Microsoft that’ll help you better understand and respond to today’s challenges.
Refine results
Topic
Products and services
Publish date
Modernize your Security Operations Center with Microsoft Sentinel
Microsoft Sentinel is a cloud-native SIEM solution powered by AI and automation that delivers intelligent security analytics across your entire enterprise.
-
-
Limited Periodic Scanning in Windows 10 to Provide Additional Malware Protection
Every month, Microsoft’s Malicious Software Removal Tool (MSRT) scans more than 500 million Windows devices for malware and malicious software. -
A brief discourse on ‘Changing browsing experience’
In response to questions we’ve received from the software distribution and monetization industry, and following our blog announcing our browser modifier policy update, we’d like to provide some details on what we refer to in our policy as “changing browsing experience”. -
MSRT April release features Bedep detection
As part of our ongoing effort to provide better malware protection, the Microsoft Malicious Software Removal Tool (MSRT) release this April will include detections for: In this blog, we’ll focus on the Bedep family of trojans. Tailored AI insights from Microsoft Security Copilot
Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI.
-
New feature in Office 2016 can block macros and help prevent infection
To help counter malware, we are releasing a new feature in Office 2016 that blocks macros from loading in certain high-risk scenarios. -
Keeping browsing experience in users’ hands
Our evaluation criteria describe the characteristics and behavior of malware and potentially unwanted applications and guide the proper identification of threats. -
Microsoft updates Trusted Root Certificate Program to reinforce trust in the Internet
At Microsoft, we are continuously working to deliver on our commitment to the security of our customers and their ecosystems. -
Microsoft Security Intelligence Report: Strontium
The Microsoft Security Intelligence Report (SIR) provides a regular snapshot of the current threat landscape, using data from more than 600 million computers worldwide. Go beyond data protection with Microsoft Purview
Govern, protect, and manage all of your data with Microsoft Purview, comprehensive solutions to help give you better visibility and control.
-
Understanding type confusion vulnerabilities: CVE-2015-0336
In March 2014, we observed a patched Adobe Flash vulnerability (CVE-2015-0336) being exploited in the wild. -
Cleaning up misleading advertisements
Microsoft is committed to protecting our customers and their Windows experience. -
Your Browser is (not) Locked
Most ransomware has a binary file that needs to be executed before it can infect your PC. -
Microsoft cloud protection
(Note: Read about Windows Defender Antivirus cloud protection service in this blog entry: Windows Defender Antivirus cloud protection service: Advanced real-time defense against never-before-seen malware.
