Change logs for security intelligence update version 1.445.152.0

We couldn’t find the update version you requested. Showing the latest version instead.

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Security intelligence update version

Released on

2/20/2026 4:29:42 AM

Added threat detections

Name	Severity
Behavior:Win32/SmartLoader.Z!MTB	severe
Behavior:Win32/SuspAccessOnDC.A!genA	severe
PUA:AIGen/ClawBExt.A	severe

Updated threat detections

Name	Severity
Adware:Win32/Swiminen	high
Backdoor:MSIL/Quasar!rfn	severe
Backdoor:PHP/C99shell!rfn	severe
Backdoor:PHP/Shell.M	severe
Backdoor:PHP/Webshell!AMTB	severe
Backdoor:Win64/CobaltStrike!rfn	severe
Behavior:Win32/Mamadut.DR	severe
Exploit:JS/ShellCode.gen	severe
Exploit:Win32/DDEDownloader	severe
Exploit:Win32/ShellCode.gen!C	severe
Exploit:Win32/Tudimons.A!dha	severe
HackTool:Python/Impacket!MSR	high
HackTool:Python/Pourri.B!MTB	high
HackTool:Win32/CobaltStrike!rfn	high
HackTool:Win32/crack	high
HackTool:Win32/Crack!MTB	high
HackTool:Win32/Keygen	high
HackTool:Win32/Keygen!MTB	high
HackTool:Win32/Logoloz!rfn	high
HackTool:Win32/Meterpreter!rfn	high
HackTool:Win32/Mimikatz.D	high
HackTool:Win32/Ntscan	high
HackTool:Win32/Patcher	high
HackTool:Win32/Tnega!MSR	high
Ransom:Linux/BlackSuit!rfn	severe
Ransom:Win32/BlackCat!rfn	severe
Ransom:Win32/Embargo!rfn	severe
Ransom:Win32/Mortis!rfn	severe
Ransom:Win32/Play!rfn	severe
Ransom:Win32/Zudochka!rfn	severe
Ransom:Win64/Akira!rfn	severe
Ransom:Win64/Lockbit.PMK!MTB	severe
Ransom:Win64/PANDORA.REL!MTB	severe
Trojan:AndroidOS/AVerseFalc!rfn	severe
Trojan:BAT/Qakbot!rfn	severe
Trojan:BAT/StartPage	severe
Trojan:HTML/IcedID!rfn	severe
Trojan:HTML/Phish.ASF!MTB	severe
Trojan:HTML/Phish.SLBE!MTB	severe
Trojan:HTML/Qakbot!rfn	severe
Trojan:HTML/Redirector!MTB	severe
Trojan:Java/Adwind.G	severe
Trojan:JS/Cryxos.AD!MTB	severe
Trojan:JS/Obfuse!rfn	severe
Trojan:JS/QakbotLNK!rfn	severe
Trojan:JS/Redirector.ABOB!MTB	severe
Trojan:Linux/Multiverze!rfn	severe
Trojan:MSIL/AsyncRat!rfn	severe
Trojan:MSIL/DllInject.N!MTB	severe
Trojan:MSIL/Jalapeno!rfn	severe
Trojan:MSIL/Masslogger!MTB	severe
Trojan:MSIL/Redline!rfn	severe
Trojan:MSIL/ShellcodeRunner!rfn	severe
Trojan:MSIL/SnakeKeylogger.EANK!MTB	severe
Trojan:MSIL/XWormRAT!rfn	severe
Trojan:O97M/DDownloader!rfn	severe
Trojan:O97M/Iscodtas.B	severe
Trojan:PDF/Phish!rfn	severe
Trojan:PDF/Qakbot!rfn	severe
Trojan:PDF/Ursnif!rfn	severe
Trojan:PowerShell/Malgent!MSR	severe
Trojan:PowerShell/Powersploit.A!MTB	severe
Trojan:PowerShell/Powersploit.T	severe
Trojan:PowerShell/QakBot!rfn	severe
Trojan:VBS/Emotet!rfn	severe
Trojan:VBS/Obfuse!rfn	severe
Trojan:VBS/Qakbot!rfn	severe
Trojan:Win32/Alevaul!rfn	severe
Trojan:Win32/AresLdrCrypt!rfn	severe
Trojan:Win32/BadJoke!MTB	severe
Trojan:Win32/Bumat!rts	high
Trojan:Win32/Casdet!rfn	severe
Trojan:Win32/Ceevee	severe
Trojan:Win32/CobaltStrike!rfn	severe
Trojan:Win32/CoinMiner	severe
Trojan:Win32/CoreWarrior.DA!MTB	severe
Trojan:Win32/Coroxy!rfn	severe
Trojan:Win32/Cripack.PGCP!MTB	severe
Trojan:Win32/CryptInject!MSR	severe
Trojan:Win32/DllInject!rfn	severe
Trojan:Win32/Dridex.ADR!MTB	severe
Trojan:Win32/Dridex.DM!MTB	severe
Trojan:Win32/Dynamer!rfn	severe
Trojan:Win32/Egairtigado!rfn	severe
Trojan:Win32/Eqtonex!bit	severe
Trojan:Win32/Etset!rfn	severe
Trojan:Win32/Glupteba!MTB	severe
Trojan:Win32/GuLoader.RAM!MTB	severe
Trojan:Win32/Kepavll!rfn	severe
Trojan:Win32/KoiLoader!rfn	severe
Trojan:Win32/Leonem!rfn	severe
Trojan:Win32/Malgent	severe
Trojan:Win32/Malgent!MSR	severe
Trojan:Win32/Malgent!MTB	severe
Trojan:Win32/Mamson.A!ac	severe
Trojan:Win32/MereTam!rfn	severe
Trojan:Win32/Nukesped.MK!MTB	severe
Trojan:Win32/Pomal!rfn	severe
Trojan:Win32/Qakbot!rfn	severe
Trojan:Win32/Rhadamanthys.SA	severe
Trojan:Win32/Salgorea.C!MTB	severe
Trojan:Win32/Seheq!rfn	severe
Trojan:Win32/Shella!rfn	severe
Trojan:Win32/Skeeyah.A!MTB	severe
Trojan:Win32/Skeeyah.A!rfn	severe
Trojan:Win32/Supma.A	severe
Trojan:Win32/Suschil!rfn	severe
Trojan:Win32/Swisyn.ADA!MTB	severe
Trojan:Win32/Tiggre!rfn	severe
Trojan:Win32/Tnega!ml	severe
Trojan:Win32/Tnega!rfn	severe
Trojan:Win32/Tnega.BK!MTB	severe
Trojan:Win32/WinLNK!rfn	severe
Trojan:Win32/Yomal!rfn	severe
Trojan:Win32/Zbot.HBAI!MTB	severe
Trojan:Win32/Zloader!rfn	severe
Trojan:Win32/Znyonm!rfn	severe
Trojan:Win32/Zusy.BL!MTB	severe
Trojan:Win32/Zusy.HBE!MTB	severe
Trojan:Win64/BLackWidow!rfn	severe
Trojan:Win64/BumbleBee!rfn	severe
Trojan:Win64/CobaltStrike!rfn	severe
Trojan:Win64/Emotet!rfn	severe
Trojan:Win64/Emotetcrypt!rfn	severe
Trojan:Win64/EmotetPacker!rfn	severe
Trojan:Win64/FateGrab!rfn	severe
Trojan:Win64/FSAutcik	severe
Trojan:Win64/Havoc!rfn	severe
Trojan:Win64/IcedID!rfn	severe
Trojan:Win64/Jobutyve!rfn	severe
Trojan:Win64/KillProc!rfn	severe
Trojan:Win64/Malgent!MSR	severe
Trojan:Win64/OysterLoader!rfn	severe
Trojan:Win64/Reflo!rfn	severe
Trojan:Win64/SpyLoader!rfn	severe
Trojan:Win64/Zapchast.ARR!MTB	severe
Trojan:Win64/ZLoader!rfn	severe
TrojanDownloader:BAT/QakBotLoader!rfn	severe
TrojanDownloader:JS/Emotet!rfn	severe
TrojanDownloader:JS/Qakbot!rfn	severe
TrojanDownloader:O97M/Donoff!rfn	severe
TrojanDownloader:O97M/Emotet!rfn	severe
TrojanDownloader:O97M/Qakbot!rfn	severe
TrojanDownloader:O97M/Ursnif!rfn	severe
TrojanDownloader:PowerShell/Obfuse!rfn	severe
TrojanDownloader:VBS/Emotet!rfn	severe
TrojanDownloader:Win32/Malgent!AMTB	severe
TrojanProxy:Win32/Prorat.gen!A	severe
TrojanSpy:AndroidOS/SMSAgnt.A!MTB	severe
Worm:Win32/Sfone.ECP!MTB	severe