Change logs for security intelligence update version 1.411.180.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Security intelligence update version

Released on

5/16/2024 11:32:37 AM

Added threat detections

Name	Severity
HackTool:MSIL/FakeHack!MTB	high
Trojan:HTML/Phish.DCAE!MTB	severe
Trojan:HTML/Phish.DE!MTB	severe
Trojan:HTML/Phish.VCAE!MTB	severe
Trojan:Linux/Test_Sig_Infected_ELF	severe
Trojan:MSIL/AgentTesla.KHGF	severe
Trojan:MSIL/AgentTesla.MBKD	severe
Trojan:MSIL/AgentTesla.RDBK	severe
Trojan:MSIL/AgentTesla.SOL!MTB	severe
Trojan:MSIL/Formbook.KAI	severe
Trojan:VBS/GuLoader.GVV!MTB	severe
Trojan:Win32/AgentTesla.SKM!MTB	severe
Trojan:Win32/CerberCrypt.K!MTB	severe
Trojan:Win32/Ekstak.RV!MTB	severe
Trojan:Win32/LummaStealer.SA	severe
Trojan:Win32/Mekotio.RF!MTB	severe
Trojan:Win32/Torbot.RPY	severe
Trojan:Win32/Vidar.KLS!MTB	severe
Trojan:Win64/Shelm.RU!MTB	severe
VirTool:PowerShell/Psmix.A	severe
Virus:Win32/Konor.RS!MTB	severe

Updated threat detections

Name	Severity
Adware:Win32/BrowserAssistant!MTB	high
Backdoor:Java/Webshell	severe
Backdoor:Linux/Gafgyt.AH!MTB	severe
Backdoor:Linux/Mirai!MTB	severe
Backdoor:Linux/Mirai.AU!MTB	severe
Backdoor:Linux/Mirai.DK!MTB	severe
Backdoor:MSIL/DCRat!MTB	severe
Backdoor:PHP/Remoteshell.B	severe
Backdoor:PHP/Shell.M	severe
Backdoor:Win32/Berbew	severe
Backdoor:Win32/Berbew.AA!MTB	severe
Backdoor:Win32/Berbew.GZ!MTB	severe
Backdoor:Win32/Berbew.W	severe
Backdoor:Win32/Hostil.gen!A	severe
Backdoor:Win32/Venik.J	severe
Backdoor:Win64/Vankul	severe
Behavior:Linux/CerberRansom.A	severe
Behavior:Linux/ConfluenceRCExecution.A	severe
Behavior:Linux/NetcatWebExecution.C	severe
Behavior:Linux/RansomMOTD.A	severe
Behavior:Linux/SuspiciousCronCreation.A	severe
Behavior:MacOS/ClearCmdHistory.A	severe
Behavior:MacOS/ClearSystemLogs.A	severe
Behavior:MacOS/FilePermModification.A	severe
Behavior:MacOS/InstallCapital.A	severe
Behavior:MacOS/SuspiciousOsascriptEval.B	severe
Behavior:MacOS/SuspOsascriptExec.A	severe
Behavior:Win32/Berbew.A!rfn	severe
Behavior:Win32/BrowserExtensionUpdateUrl.A	severe
Behavior:Win32/Fareit.A!rfn	severe
Behavior:Win32/GenRansom.GP!gpo	severe
Behavior:Win32/GpoNonFriendly.SA!gpo	severe
Behavior:Win32/Guboot.A!rfn	severe
Behavior:Win32/Lebreat.A!rfn	severe
Behavior:Win32/Lethic.A!rfn	severe
Behavior:Win32/OFNRclone	severe
Behavior:Win32/Picsys.A!rfn	severe
Behavior:Win32/SusBlockFirewallRule.A	severe
Behavior:Win32/Unruy.A!rfn	severe
Behavior:Win32/Upatre.A!rfn	severe
Behavior:Win32/Wabot.A!rfn	severe
Behavior:Win32/Zbot.A!rfn	severe
BrowserModifier:BAT/Shafmia	high
DDoS:Linux/Lightaidra	severe
DDoS:Win32/Nitol.A	severe
DDoS:Win32/Nitol.B	severe
Exploit:HTML/IframeRef.DX	severe
Exploit:O97M/CVE-2017-0199.RVGU	severe
Exploit:O97M/CVE-2017-11882!KZH	severe
Exploit:O97M/CVE-2017-11882.RVCK	severe
Exploit:SWF/CVE-2016-1019	severe
HackTool:JS/ReGeorg	high
HackTool:Python/Multiverze	high
HackTool:Win32/AutoKMS	high
HackTool:Win32/CobaltStrike!pz	high
HackTool:Win32/crack	high
HackTool:Win32/Cymulion	high
HackTool:Win32/GameHack!MSR	high
HackTool:Win32/Winactivator	high
HackTool:Win64/Mikatz!dha	high
HackTool:Win64/Mimikatz.A	high
MonitoringTool:AndroidOS/MobileTracker.DS!MTB	severe
Program:AndroidOS/Multiverze	high
PWS:Win32/Rugond.A	severe
Ransom:MSIL/CashCrypt.PA!MTB	severe
Ransom:Win32/Crenag.ARG!MTB	severe
Ransom:Win32/GrandCrab.A	severe
Ransom:Win32/QilinCrypt	severe
Ransom:Win32/Stopcrypt	severe
Ransom:Win32/StopCrypt.AAX!MTB	severe
Ransom:Win32/StopCrypt.SL!MTB	severe
Ransom:Win64/Basta.SAB!MTB	severe
SoftwareBundler:Win32/Prepscram	high
Trojan:AndroidOS/Multiverze	severe
Trojan:AndroidOS/SmsAgent.AP	severe
Trojan:BAT/Stravdri.A	severe
Trojan:HTML/Casdet!rfn	severe
Trojan:HTML/Obfuse.PRFJ	severe
Trojan:HTML/Redirector	severe
Trojan:Java/SAgnt!MSR	severe
Trojan:JS/CoinMiner.A!MTB	severe
Trojan:JS/Redirector.AR!MTB	severe
Trojan:MSIL/AgentTesla	severe
Trojan:MSIL/AgentTesla.ASDH!MTB	severe
Trojan:MSIL/AgentTesla.ASFR!MTB	severe
Trojan:MSIL/AgentTesla.EPJ!MTB	severe
Trojan:MSIL/AgentTesla.KTTL	severe
Trojan:MSIL/AgentTesla.MBFW	severe
Trojan:MSIL/AgentTesla.NFP!MTB	severe
Trojan:MSIL/AgentTesla.PSMC!MTB	severe
Trojan:MSIL/AgentTesla.PSXP!MTB	severe
Trojan:MSIL/AgentTesla.RCK!MTB	severe
Trojan:MSIL/AgentTesla.RVAK	severe
Trojan:MSIL/AveMaria.RDF!MTB	severe
Trojan:MSIL/CoinMiner.MA!MTB	severe
Trojan:MSIL/CymRan!pz	severe
Trojan:MSIL/CymRan.ACA!MTB	severe
Trojan:MSIL/DCRat.JB	severe
Trojan:MSIL/Formbook.EE!MTB	severe
Trojan:MSIL/LibeRAT.A!MTB	severe
Trojan:MSIL/Lokibot!MTB	severe
Trojan:MSIL/LokiBot.RPX!MTB	severe
Trojan:MSIL/LummaStealer!MTB	severe
Trojan:MSIL/LummaStealer.AMMB!MTB	severe
Trojan:MSIL/LummaStealer.NM!MTB	severe
Trojan:MSIL/Remcos.RDN!MTB	severe
Trojan:MSIL/RemLoader!MTB	severe
Trojan:MSIL/SnakeKeyLogger.RDAV!MTB	severe
Trojan:MSIL/Taskun.SPBM!MTB	severe
Trojan:MSIL/WhiteSnakeStealer.AAZY	severe
Trojan:MSIL/XWorm.C!MTB	severe
Trojan:PDF/Phish.PRT!MTB	severe
Trojan:PHP/MumaShell.A	severe
Trojan:PowerShell/ReverseShell.SA	severe
Trojan:VBS/AgentTesla.RTCN!MTB	severe
Trojan:VBS/DropBin.CS!eml	severe
Trojan:VBS/Launvibs.B	severe
Trojan:Win32/AgentTesla!MTB	severe
Trojan:Win32/Astaroth.psyP!MTB	severe
Trojan:Win32/AutoitInject!MTB	severe
Trojan:Win32/AutoitShellInj.A!MTB	severe
Trojan:Win32/AutoitShellInj.EA!MTB	severe
Trojan:Win32/Baidence.MA!MTB	severe
Trojan:Win32/Barys.GMA!MTB	severe
Trojan:Win32/Barys.GXV!MTB	severe
Trojan:Win32/Berbew.RPY!MTB	severe
Trojan:Win32/Blackmoon.RPQ!MTB	severe
Trojan:Win32/Blackmoon.RPY!MTB	severe
Trojan:Win32/Blihan.A	severe
Trojan:Win32/Casdet!rfn	severe
Trojan:Win32/cerber	severe
Trojan:Win32/Cerber.MPI!MTB	severe
Trojan:Win32/ClipBanker.RPP!MTB	severe
Trojan:Win32/CobaltStrike.LKAK!MTB	severe
Trojan:Win32/Convagent.AMBA!MTB	severe
Trojan:Win32/CryptInject	severe
Trojan:Win32/CryptInject!ml	severe
Trojan:Win32/CryptInject!MSR	severe
Trojan:Win32/CryptInject.FB!MTB	severe
Trojan:Win32/Cryware.B	severe
Trojan:Win32/CymRan.ACR!MTB	severe
Trojan:Win32/DCRat.MQ!MTB	severe
Trojan:Win32/Dibizor.A!bit	severe
Trojan:Win32/DiskWriter.MWAA!MTB	severe
Trojan:Win32/Dorifel	severe
Trojan:Win32/Dorifel.EC!MTB	severe
Trojan:Win32/Dorv.A	severe
Trojan:Win32/Dridex.RPX!MTB	severe
Trojan:Win32/Ekstak!MTB	severe
Trojan:Win32/Emotet.CJ	severe
Trojan:Win32/Esulat	severe
Trojan:Win32/Farfli!pz	severe
Trojan:Win32/Farfli.MD!MTB	severe
Trojan:Win32/FormBook.AFK!MTB	severe
Trojan:Win32/Gepys.VDK!MTB	severe
Trojan:Win32/Grandoreiro.psyN!MTB	severe
Trojan:Win32/GuLoader.KKJF!MTB	severe
Trojan:Win32/ICLoader.JL!MTB	severe
Trojan:Win32/ICLoader.JLK!MTB	severe
Trojan:Win32/ICLoader.RPZ!MTB	severe
Trojan:Win32/Jeefo	severe
Trojan:Win32/Lazy.AB!MTB	severe
Trojan:Win32/Leonem	severe
Trojan:Win32/Lockscreen.AMMD!MTB	severe
Trojan:Win32/LummaC!MTB	severe
Trojan:Win32/LummaC.AMAE!MTB	severe
Trojan:Win32/LummaC.KAA!MTB	severe
Trojan:Win32/LummaStealer.JHU!MTB	severe
Trojan:Win32/Malgent!MSR	severe
Trojan:Win32/Malgent!MTB	severe
Trojan:Win32/Multiverze	severe
Trojan:Win32/Neoreblamy.RP!MTB	severe
Trojan:Win32/Neoreblamy.RS!MTB	severe
Trojan:Win32/OffLoader.ASK!MTB	severe
Trojan:Win32/PhishLeonem	severe
Trojan:Win32/Pincav.ARA!MTB	severe
Trojan:Win32/Pincav.NPC!MTB	severe
Trojan:Win32/PovertyStealer.RDA!MTB	severe
Trojan:Win32/Qbot.RT!MTB	severe
Trojan:Win32/Qukart.ASCA!MTB	severe
Trojan:Win32/Qukart.ASO!MTB	severe
Trojan:Win32/Qukart.ASR!MTB	severe
Trojan:Win32/Raccoon.RE!MTB	severe
Trojan:Win32/Raccrypt.GB!MTB	severe
Trojan:Win32/Raccrypt.GY!MTB	severe
Trojan:Win32/Ramnit.A	severe
Trojan:Win32/Ramnit.C	severe
Trojan:Win32/RanumBot!pz	severe
Trojan:Win32/Redline.ASCD!MTB	severe
Trojan:Win32/RedLine.D!MTB	severe
Trojan:Win32/RedLine.DB!MTB	severe
Trojan:Win32/Redline.GNQ!MTB	severe
Trojan:Win32/Redline.QG!MTB	severe
Trojan:Win32/RedLine.RDES!MTB	severe
Trojan:Win32/RedLine.RDEV!MTB	severe
Trojan:Win32/Redline.RF!MTB	severe
Trojan:Win32/Redosdru.E!bit	severe
Trojan:Win32/Rhadamanthys.SPX!MTB	severe
Trojan:Win32/RisePro.RP!MTB	severe
Trojan:Win32/RiseProStealer.AM!MTB	severe
Trojan:Win32/RiseProStealer.AX!MTB	severe
Trojan:Win32/Rootkit.EA!MTB	severe
Trojan:Win32/Sabsik.FL.B!ml	severe
Trojan:Win32/Salgorea.A!MTB	severe
Trojan:Win32/Sdum.RE!MTB	severe
Trojan:Win32/Seheq!rfn	severe
Trojan:Win32/Skeeyah.A!rfn	severe
Trojan:Win32/SmokeLoader.FT!MTB	severe
Trojan:Win32/Smokeloader.GAZ!MTB	severe
Trojan:Win32/Smokeloader.GMR!MTB	severe
Trojan:Win32/Smokeloader.GXZ!MTB	severe
Trojan:Win32/Smokeloader.GZX!MTB	severe
Trojan:Win32/Smokeloader.HNE!MTB	severe
Trojan:Win32/Smokeloader.HNG!MTB	severe
Trojan:Win32/SmokeLoader.RPY!MTB	severe
Trojan:Win32/Smokeloader.SPHT!MTB	severe
Trojan:Win32/Stealerc.RP!MTB	severe
Trojan:Win32/StormAttack.A!MTB	severe
Trojan:Win32/Strab.GPX	severe
Trojan:Win32/Strab.GPX!MTB	severe
Trojan:Win32/Swisyn.ADA!MTB	severe
Trojan:Win32/Swisyn.MBHW!MTB	severe
Trojan:Win32/Tinba	severe
Trojan:Win32/Tnega!ml	severe
Trojan:Win32/Trickbot	severe
Trojan:Win32/Trickbot.GML!MTB	severe
Trojan:Win32/VBClone.RG!MTB	severe
Trojan:Win32/Vidar	severe
Trojan:Win32/Vindor!pz	severe
Trojan:Win32/Vundo.gen!AW	severe
Trojan:Win32/Walinlog.A	severe
Trojan:Win32/WinLnk.A!MTB	severe
Trojan:Win32/Zbot.SPD!MTB	severe
Trojan:Win32/Zegost.PEF!MTB	severe
Trojan:Win32/Zenapak.CCDI!MTB	severe
Trojan:Win32/Zenpak.ASO!MTB	severe
Trojan:Win32/Zenpak.BX!MTB	severe
Trojan:Win32/Zenpak.RN!MTB	severe
Trojan:Win32/Znyonm	severe
Trojan:Win32/Zombie.NBJ!MTB	severe
Trojan:Win32/Zusy.EC!MTB	severe
Trojan:Win32/Zusy.HNS!MTB	severe
Trojan:Win32/Zusy.RE!MTB	severe
Trojan:Win64/BlackWidow.RPZ!MTB	severe
Trojan:Win64/CoinMiner.RDL!MTB	severe
Trojan:Win64/CoinMiner.VS	severe
Trojan:Win64/CymRan.ACA!MTB	severe
Trojan:Win64/CymRan.ACN!MTB	severe
Trojan:Win64/CymulateRansomTest.LK!MTB	severe
Trojan:Win64/Grandoreiro.psyE!MTB	severe
Trojan:Win64/Lazy.AH!MTB	severe
Trojan:Win64/Lazy.AME!MTB	severe
Trojan:Win64/Malgent!MSR	severe
Trojan:Win64/Meduza.RPX!MTB	severe
Trojan:Win64/Meterpreter.gen!B	severe
Trojan:Win64/Midie!MTB	severe
Trojan:Win64/Midie.NCAA!MTB	severe
Trojan:Win64/RootkitDrv!MSR	severe
Trojan:Win64/Rozena.CEW!MTB	severe
Trojan:Win64/SpyLoader!pz	severe
Trojan:XML/SuspBuild.MJ!ibt	severe
TrojanDownloader:HTML/Tnega.RVD!MTB	severe
TrojanDownloader:JS/Nemucod	severe
TrojanDownloader:O97M/Exsto.YA	severe
TrojanDownloader:Win32/Berbew	severe
TrojanDownloader:Win32/Loan.BG!MTB	severe
TrojanDownloader:Win32/Rugmi!MTB	severe
TrojanDropper:AndroidOS/SAgent.C!MTB	severe
TrojanDropper:AndroidOS/SAgent.D!MTB	severe
TrojanDropper:HTML/Obfuse.AAC!MTB	severe
TrojanDropper:Win32/Addrop.C!bit	severe
TrojanDropper:Win32/Gepys.A	severe
TrojanDropper:Win32/Muldrop.V!MTB	severe
TrojanSpy:MSIL/AgentTesla.AQ!MTB	severe
TrojanSpy:Win32/Lydra.gen!B	severe
VirTool:MSIL/Cajan.A!MTB	severe
VirTool:Win32/CeeInject	severe
VirTool:Win32/Injeber!pz	severe
VirTool:Win32/Injector.gen!BQ	severe
VirTool:Win32/Obfuscator.RP	severe
VirTool:Win64/Empire.A	severe
Worm:VBS/Jenxcus!lnk	severe
Worm:VBS/Pordeezy.RB!lnk	severe
Worm:Win32/AutoRun!atmn	severe
Worm:Win32/AutoRun.XXY!bit	severe
Worm:Win32/Cyrmsmb.A!MSR	severe
Worm:Win32/Gamarue.gen!lnk	severe
Worm:Win32/NeksMiner.A	severe
Worm:Win32/Nuqel.TA	severe
Worm:Win32/Pemtaka.A	severe
Worm:Win32/SillyShareCopy.AU	severe
Worm:Win32/VB	severe
Worm:Win32/Vobfus.SF	severe