Skip to main content

Change logs for security intelligence update version 1.455.388.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Released on

7/28/2026 7:21:02 AM

Added threat detections

Name Severity
Behavior:Win32/PFAppChildProcVSExt.A severe
Behavior:Win64/Adeptesz.B!sms severe
Behavior:Win64/HarrShellLd.B!sms severe
Behavior:Win64/Havoc.G!sms severe
Behavior:Win64/Scalodesz.B!sms severe
Trojan:Win32/ClipBanker!atmnm severe
Trojan:Win32/Farfli!atmnm severe
Trojan:Win32/Grandoreiro!atmnm severe
Trojan:Win64/DLLHijack.DT!MTB severe
VirTool:Win64/Adeptesz.A!sms severe
VirTool:Win64/HarrShellLd.A!sms severe
VirTool:Win64/Havoc.F!sms severe
VirTool:Win64/Scalodesz.A!sms severe
Virus:Win32/Mikcer.D severe

Updated threat detections

Name Severity
Adware:Win32/AdLoad high
Backdoor:MSIL/Bladabindi!rfn severe
Backdoor:MSIL/XWormRAT!atmn severe
Backdoor:PHP/Webshell severe
Backdoor:Python/Meterpreter.C severe
Behavior:Win32/ASRUsbCopiedRenamed severe
Behavior:Win32/BaseFileEncrypt.A severe
Behavior:Win32/BaseFileEncryptCpRnTel.A severe
Behavior:Win32/BaseFileEncryptTel.A severe
Behavior:Win32/BlockOfficeCreateExeContentTracking severe
Behavior:Win32/DllExecuteAbuse.A severe
Behavior:Win32/DroppedByOfficeProc.A severe
Behavior:Win32/EncryptTarget.A severe
Behavior:Win32/EncryptTarget.B severe
Behavior:Win32/Mamadut.BH severe
Behavior:Win32/PersistInStartupDir.A severe
Behavior:Win32/PersistInStartupDir.B severe
Behavior:Win32/PersistInStartupDirTel.A severe
Behavior:Win32/PFApp_SuspVSExtension.A severe
Behavior:Win32/QuartzMoor!apsi severe
Behavior:Win32/SusAppCertDllsAbuse.A severe
Behavior:Win32/SuspClickFix.L3 severe
Behavior:Win32/TwineTalk.A!nri severe
Behavior:Win32/TwineTalk.B!nri severe
Behavior:Win32/TwineTalk.C!nri severe
Behavior:Win32/VulDriverAsrTracking severe
Exploit:JS/CVE-2020-16040.B severe
Exploit:O97M/CVE-2017-11882.RVR!MTB severe
Exploit:Win32/CVE-2020-1054 severe
HackTool:BAT/AutoKMS!AMTB high
HackTool:PowerShell/PowerSploit.RL!MTB high
HackTool:Python/Impacket!MSR high
HackTool:Script/AutoKMS!AMTB high
HackTool:Win32/AutoKMS high
HackTool:Win32/Keygen high
HackTool:Win32/ProductKey high
HackTool:Win64/KMSAuto!MTB high
HackTool:Win64/Meterpreter high
HackTool:Win64/Mikatz!dha high
PWS:Win32/Fareit!rfn severe
Ransom:Linux/Ransomhub!rfn severe
Ransom:Win32/QilinCrypt.PA!MTB severe
Ransom:Win64/Shinyspider!rfn severe
Trojan:MSIL/Razy!atmn severe
Trojan:PDF/Phish!rfn severe
Trojan:PowerShell/CredentialPhisher severe
Trojan:PowerShell/Malgent!MSR severe
Trojan:PowerShell/Powersploit.A!MTB severe
Trojan:PowerShell/ReverseShell.SA severe
Trojan:Script/Malgent!MSR severe
Trojan:Script/Multiverze!rfn severe
Trojan:Win32/Carbanak!rfn severe
Trojan:Win32/Casdet!rfn severe
Trojan:Win32/Ceevee severe
Trojan:Win32/CryptInject!rfn severe
Trojan:Win32/Egairtigado!rfn severe
Trojan:Win32/Emotet!rfn severe
Trojan:Win32/EncryptTarget.A severe
Trojan:Win32/Etset!rfn severe
Trojan:Win32/Fauppod!rfn severe
Trojan:Win32/Kepavll!rfn severe
Trojan:Win32/Leonem!rfn severe
Trojan:Win32/Malgent severe
Trojan:Win32/MalLoader!rfn severe
Trojan:Win32/MereTam!rfn severe
Trojan:Win32/PikaBot!rfn severe
Trojan:Win32/Pomal!rfn severe
Trojan:Win32/PureRat!rfn severe
Trojan:Win32/Qakbot!rfn severe
Trojan:Win32/Qwexlafiba!rfn severe
Trojan:Win32/Ravartar!rfn severe
Trojan:Win32/Seheq!rfn severe
Trojan:Win32/Skeeyah!MSR severe
Trojan:Win32/Skeeyah.A!MTB severe
Trojan:Win32/Suschil!rfn severe
Trojan:Win32/WinGo severe
Trojan:Win32/WinLNK!rfn severe
Trojan:Win32/Yomal!rfn severe
Trojan:Win32/Znyonm!rfn severe
Trojan:Win64/BlackWidow!rfn severe
Trojan:Win64/BumbleBee!rfn severe
Trojan:Win64/CoinMiner!rfn severe
Trojan:Win64/DLLHijack!rfn severe
Trojan:Win64/Havoc!rfn severe
Trojan:Win64/Latrodecturs!rfn severe
Trojan:Win64/PackIcedID!rfn severe
Trojan:Win64/SpyLoader!rfn severe
TrojanDownloader:JS/Qakbot!rfn severe
TrojanDownloader:MSIL/Tnega severe
TrojanDownloader:O97M/Emotet!rfn severe
Virus:Win32/Grenam.A severe
Virus:Win32/Mikcer.B severe
Virus:Win32/Mikcer.C severe
Virus:Win32/Neshta.C severe
VulnerableDriver:Win32/HwRwDrv severe
Worm:Win32/AutoRun!atmn severe
Worm:Win32/NeksMiner!atmnm severe