Change logs for security intelligence update version 1.443.214.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Security intelligence update version

Released on

12/19/2025 2:50:47 PM

Added threat detections

Name	Severity
Behavior:Linux/Shaihulud.FO23	severe
Behavior:Linux/Shaihulud.FO24	severe
Trojan:HTML/XWorm.SLXM!MTB	severe
Trojan:Win32/SchTasktemp!BV	severe
Trojan:Win64/BitCoinMiner!MTB	severe
Trojan:Win64/PoolInject.GVB!MTB	severe
Trojan:Win64/Vidar.SPB!MTB	severe

Updated threat detections

Name	Severity
Backdoor:Win64/Coroxy!rfn	severe
Backdoor:Win64/Vankul!rfn	severe
Behavior:Linux/Shaihulud.FO19	severe
Behavior:Linux/Shaihulud.FO22	severe
Exploit:O97M/CVE-2017-11882!MSR	severe
HackTool:MSIL/SharpHound!rfn	high
HackTool:PowerShell/PowerView.A	high
HackTool:Win32/Crack!MTB	high
HackTool:Win32/Keygen	high
HackTool:Win32/Keygen!AMTB	high
HackTool:Win32/Malgent!MSR	high
HackTool:Win32/Meterpreter!rfn	high
HackTool:Win32/Patcher!AMTB	high
Program:MacOS/Multiverze!rfn	high
Ransom:MSIL/Cryptolocker.DV!MTB	severe
Ransom:Win32/ContiCrypt!rfn	severe
Ransom:Win32/Genasom!rfn	severe
Ransom:Win32/Helldown!rfn	severe
Ransom:Win32/Lynx!rfn	severe
Ransom:Win32/Wannaren!rfn	severe
Ransom:Win64/Akira!rfn	severe
Ransom:Win64/Mallox!rfn	severe
Ransom:Win64/Ransomhub!rfn	severe
Trojan:AndroidOS/AVerseFalc!rfn	severe
Trojan:BAT/Qakbot!rfn	severe
Trojan:HTML/Obfuse!rfn	severe
Trojan:HTML/Qakbot!rfn	severe
Trojan:HTML/Redirector.JNP!MTB	severe
Trojan:JS/IframeInject	severe
Trojan:JS/Malgent!MSR	severe
Trojan:JS/NetLoader.SB!MTB	severe
Trojan:JS/QakbotLNK!rfn	severe
Trojan:JS/Tnega!rfn	severe
Trojan:MSIL/AcrStealer!MTB	severe
Trojan:MSIL/barys!MTB	severe
Trojan:MSIL/Jalapeno!rfn	severe
Trojan:MSIL/NjRat!rfn	severe
Trojan:MSIL/Quasar!MTB	severe
Trojan:MSIL/XMRig!rfn	severe
Trojan:O97M/DDownloader!rfn	severe
Trojan:PowerShell/Pterodo!rfn	severe
Trojan:PowerShell/QakBot!rfn	severe
Trojan:Script/Malgent!MSR	severe
Trojan:VBS/Qakbot!rfn	severe
Trojan:Win32/AgentTesla!ml	severe
Trojan:Win32/Alevaul!rfn	severe
Trojan:Win32/Autohk!rfn	severe
Trojan:Win32/AutoitInject.DSK!MTB	severe
Trojan:Win32/Casdet!rfn	severe
Trojan:Win32/DllInject!rfn	severe
Trojan:Win32/Egairtigado!rfn	severe
Trojan:Win32/Ekstak!rfn	severe
Trojan:Win32/Etset!rfn	severe
Trojan:Win32/Fragtor!MTB	severe
Trojan:Win32/Fragtor.AR!MTB	severe
Trojan:Win32/GenCodeInjected!BV	severe
Trojan:Win32/ICLoader!rfn	severe
Trojan:Win32/Kepavll!rfn	severe
Trojan:Win32/Latrodectus!rfn	severe
Trojan:Win32/Leonem!rfn	severe
Trojan:Win32/LokiBot!rfn	severe
Trojan:Win32/Malgent	severe
Trojan:Win32/Malgent!MSR	severe
Trojan:Win32/Malgent!MTB	severe
Trojan:Win32/MalLoader!rfn	severe
Trojan:Win32/Mamson!rfn	severe
Trojan:Win32/MereTam!rfn	severe
Trojan:Win32/Neoreklami!MTB	severe
Trojan:Win32/Occamy.CDB	severe
Trojan:Win32/Orsam!rts	high
Trojan:Win32/Pomal!rfn	severe
Trojan:Win32/Pterodo!rfn	severe
Trojan:Win32/Qakbot!rfn	severe
Trojan:Win32/Redline!rfn	severe
Trojan:Win32/Seheq!rfn	severe
Trojan:Win32/Suschil!rfn	severe
Trojan:Win32/Tnega!MSR	severe
Trojan:Win32/Vindor!rfn	severe
Trojan:Win32/Wacatac	severe
Trojan:Win32/Yomal!rfn	severe
Trojan:Win32/Zloader!rfn	severe
Trojan:Win32/Znyonm!rfn	severe
Trojan:Win64/BlackWidow!rfn	severe
Trojan:Win64/CoinMiner!rfn	severe
Trojan:Win64/CryptInject!rfn	severe
Trojan:Win64/DllInject!rfn	severe
Trojan:Win64/Donut!rfn	severe
Trojan:Win64/Meterpreter!rfn	severe
Trojan:Win64/NightHawk!rfn	severe
Trojan:Win64/RomCom!rfn	severe
Trojan:Win64/Vidar!MTB	severe
Trojan:Win64/ZLoader!rfn	severe
TrojanDownloader:BAT/QakBotLoader!rfn	severe
TrojanDownloader:JS/Qakbot!rfn	severe
TrojanDownloader:O97M/Emotet!rfn	severe
TrojanDownloader:PowerShell/Obfuse!rfn	severe
TrojanDropper:Win32/Addrop!rfn	severe
TrojanSpy:Win32/Banker!AMTB	severe
VirTool:Win64/CobaltStrike!rfn	severe