Change logs for security intelligence update version 1.445.323.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Security intelligence update version

Released on

3/2/2026 8:54:25 PM

Added threat detections

Name	Severity
DoS:Script/GrimWiper.A!dha	severe
DoS:Win32/SDeleteAbuse.C!dha	severe
DoS:Win32/ThornWiper.A!dha	severe
DoS:Win32/ThornWiper.B!dha	severe
DoS:Win64/RumbleBread.A!dha	severe
Exploit:HTML/CVE-2008-2551!AMTB	severe
Ransom:MSIL/WannaCry!AMTB	severe
Trojan:HTML/Redirector.PAJT!MTB	severe
Trojan:JS/Redirector.ZHH!MTB	severe
Trojan:LNK/RainbowMustard.A!dha	severe
Trojan:MSIL/DarkTortilla.MCT!MTB	severe
Trojan:MSIL/Denes.ADE!MTB	severe
Trojan:MSIL/DSCStealer.MCT!MTB	severe
Trojan:MSIL/Heracles.BAN!MTB	severe
Trojan:MSIL/Lazy.KKA!MTB	severe
Trojan:MSIL/Njrat.ZIH!MTB	severe
Trojan:MSIL/SantaStealer!MTB	severe
Trojan:MSIL/Typhon.KK!MTB	severe
Trojan:MSIL/XWorm.ZGH!MTB	severe
Trojan:PowerShell/Boxter.MR!MTB	severe
Trojan:PowerShell/Boxter.MT!MTB	severe
Trojan:PowerShell/DownloadObfus!rfn	severe
Trojan:PowerShell/GuLoader.PAB!MTB	severe
Trojan:PowerShell/Obfuse.PO!MTB	severe
Trojan:Python/ShellcodeRunner.AB!MTB	severe
Trojan:Win32/DllInject.BAA!MTB	severe
Trojan:Win32/FireStream.A!dha	severe
Trojan:Win32/WinLNK.PABR!MTB	severe
Trojan:Win64/KillWin!AMTB	severe
Trojan:Win64/Konni.P!MTB	severe
Trojan:Win64/StormWiper.A!dha	severe
Trojan:Win64/Zusy.KKG!MTB	severe

Updated threat detections

Name	Severity
Adware:Win32/Tnega	high
Backdoor:Linux/BPFDoor.A!MTB	severe
Backdoor:MSIL/AsyncRat!rfn	severe
Backdoor:PHP/Webshell	severe
Backdoor:Win64/RomComLoader!rfn	severe
Behavior:Linux/Turla.A	severe
Behavior:Win32/Mamadut.DS	severe
BrowserModifier:MSIL/TamperedChef	high
Exploit:Win32/DDEDownloader	severe
Exploit:Win32/Tudimons.A!dha	severe
HackTool:Linux/PthToolkitGen.ZZ	high
HackTool:MSIL/Malgent!AMTB	high
HackTool:Python/Impacket!MSR	high
HackTool:Python/Impacket.AB	high
HackTool:Win32/AutoKMS.D	high
HackTool:Win32/ChromePass	high
HackTool:Win32/crack	high
HackTool:Win32/Crack!MTB	high
HackTool:Win32/GameHack	high
HackTool:Win32/GameHack!MTB	high
HackTool:Win32/Keygen	high
HackTool:Win32/Keygen!rfn	high
HackTool:Win32/Kmsactivator	high
HackTool:Win32/Malgent!MSR	high
HackTool:Win32/Meterpreter!rfn	high
HackTool:Win32/Offact	high
HackTool:Win32/Patcher	high
HackTool:Win32/Unlocker!MSR	high
HackTool:Win32/Wpakill	high
HackTool:Win32/Wpakill.AR!MTB	high
HackTool:Win64/EDRSandblast!rfn	high
HackTool:Win64/Mikatz!dha	high
HackTool:Win64/RemoteAdmin!MTB	high
Misleading:Linux/FRP.B!MTB	high
Ransom:Win32/Basta!rfn	severe
Ransom:Win32/BastaLoader!rfn	severe
Ransom:Win32/BlackCat!rfn	severe
Ransom:Win32/DragonForce!MTB	severe
Ransom:Win32/Filecoder!rfn	severe
Ransom:Win32/Genasom!rfn	severe
Ransom:Win64/Akira!rfn	severe
Ransom:Win64/QilinCrypt!MTB	severe
Trojan:AndroidOS/AVerseFalc!rfn	severe
Trojan:AndroidOS/SpyNote.E!MTB	severe
Trojan:BAT/LNK_DarkGate!rfn	severe
Trojan:HTML/IcedID!rfn	severe
Trojan:HTML/Redirector.MKE!MTB	severe
Trojan:HTML/Redirector.ZXX!MTB	severe
Trojan:JS/Chopper!dha	severe
Trojan:JS/Obfuse!MTB	severe
Trojan:JS/Redirector.ABOB!MTB	severe
Trojan:Linux/Multiverze!rfn	severe
Trojan:MacOS/Multiverze	severe
Trojan:MSIL/Cryptor	severe
Trojan:MSIL/Jalapeno!AMTB	severe
Trojan:MSIL/SantaStealer!MTB	severe
Trojan:MSIL/Zilla!MTB	severe
Trojan:MSIL/Zusy!MTB	severe
Trojan:O97M/DDownloader!rfn	severe
Trojan:PDF/Phish!MSR	severe
Trojan:PDF/Phish.MP!MSR	severe
Trojan:PDF/Phish.PA!MTB	severe
Trojan:PDF/Ursinf!rfn	severe
Trojan:PHP/WebShell!MSR	severe
Trojan:PowerShell/GuLoader.PAB!MTB	severe
Trojan:PowerShell/Obfuse!MSR	severe
Trojan:Python/Multiverze!rfn	severe
Trojan:Script/Multiverze!rfn	severe
Trojan:VBS/Emotet!rfn	severe
Trojan:VBS/GuLoader.SNY!MTB	severe
Trojan:VBS/Obfuse!rfn	severe
Trojan:VBS/Obfuse.PO!MTB	severe
Trojan:VBS/Qakbot!rfn	severe
Trojan:VBS/XWorm.PA!MTB	severe
Trojan:Win32/Alevaul!MSR	severe
Trojan:Win32/Alevaul!rfn	severe
Trojan:Win32/Apolmy.C	severe
Trojan:Win32/BadJoke!MTB	severe
Trojan:Win32/Beaconpy.B	severe
Trojan:Win32/Bluteal!rfn	severe
Trojan:Win32/Ceevee	severe
Trojan:Win32/Ceprolad.A	severe
Trojan:Win32/ClickFix.AAAG!MTB	severe
Trojan:Win32/CryptInject	severe
Trojan:Win32/CryptInject.BT!MTB	severe
Trojan:Win32/DSSDetection	severe
Trojan:Win32/Dynamer!ac	severe
Trojan:Win32/Dynamer!rfn	severe
Trojan:Win32/Egairtigado!rfn	severe
Trojan:Win32/Etset!rfn	severe
Trojan:Win32/Generic!rfn	severe
Trojan:Win32/GuLoader.RVW!MTB	severe
Trojan:Win32/Hancitor	severe
Trojan:Win32/IcedIdLNK!rfn	severe
Trojan:Win32/Kepavll!rfn	severe
Trojan:Win32/Klogger	severe
Trojan:Win32/Lazy!rfn	severe
Trojan:Win32/Leonem!rfn	severe
Trojan:Win32/Malex!rfn	severe
Trojan:Win32/Malgent	severe
Trojan:Win32/Malgent!AMTB	severe
Trojan:Win32/Malgent!MSR	severe
Trojan:Win32/Malgent!MTB	severe
Trojan:Win32/Malgent!rfn	severe
Trojan:Win32/Malgnet	severe
Trojan:Win32/Mamson.A!ac	severe
Trojan:Win32/MereTam!rfn	severe
Trojan:Win32/Multiverze!rfn	severe
Trojan:Win32/NgrBot!rfn	severe
Trojan:Win32/Occamy.C51	severe
Trojan:Win32/Occamy.C7F	severe
Trojan:Win32/Pomal!rfn	severe
Trojan:Win32/Primarypass!rfn	severe
Trojan:Win32/Qakbot!rfn	severe
Trojan:Win32/Qzonit!rfn	severe
Trojan:Win32/RiskyRepack	severe
Trojan:Win32/Rugmi!rfn	severe
Trojan:Win32/Seheq!rfn	severe
Trojan:Win32/Skeeyah	severe
Trojan:Win32/Skeeyah.B!rfn	severe
Trojan:Win32/Sonoko.A!rfn	severe
Trojan:Win32/Supma.A	severe
Trojan:Win32/Suschil!rfn	severe
Trojan:Win32/Swrort!rfn	severe
Trojan:Win32/Tasker!MTB	severe
Trojan:Win32/Tiggre!rfn	severe
Trojan:Win32/Tnega!ml	severe
Trojan:Win32/Tnega!MSR	severe
Trojan:Win32/Vagger!rfn	severe
Trojan:Win32/VbInject!MTB	severe
Trojan:Win32/Vindor!rfn	severe
Trojan:Win32/Wacatac.A!rfn	severe
Trojan:Win32/WinLNK!rfn	severe
Trojan:Win32/WinLNK.VCC!MSR	severe
Trojan:Win32/XWorm!MSR	severe
Trojan:Win32/Yomal!rfn	severe
Trojan:Win32/Znyonm!rfn	severe
Trojan:Win64/ClipBanker!MTB	severe
Trojan:Win64/CobaltStrike!rfn	severe
Trojan:Win64/CoinMiner!rfn	severe
Trojan:Win64/Emotetcrypt!rfn	severe
Trojan:Win64/EmotetPacker!rfn	severe
Trojan:Win64/Expiro!MTB	severe
Trojan:Win64/Gulpix!rfn	severe
Trojan:Win64/InfoStealer!MTB	severe
Trojan:Win64/InfoStealer.P!MTB	severe
Trojan:Win64/Malgent!MSR	severe
Trojan:Win64/ShellcodeRunner!rfn	severe
Trojan:Win64/ShellcodeRunner.KK!MTB	severe
Trojan:Win64/Tedy!MTB	severe
Trojan:Win64/Tnega!MSR	severe
Trojan:Win64/Wingo!MTB	severe
Trojan:Win64/ZLoader!rfn	severe
Trojan:Win64/Zusy!MTB	severe
TrojanDownloader:HTML/Adodb.gen!A	severe
TrojanDownloader:JS/Nemucod!rfn	severe
TrojanDownloader:JS/Qakbot!rfn	severe
TrojanDownloader:O97M/Emotet!rfn	severe
TrojanDownloader:Win32/Quireap!rfn	severe
TrojanDropper:PowerShell/Ploty!rfn	severe
VirTool:PHP/Remeshelsz	severe
VirTool:Win64/Privelesz.A	severe
Worm:Win32/Gamarue!rfn	severe
Worm:Win32/Sohanad!rfn	severe