Skip to main content

Change logs for security intelligence update version 1.411.410.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Released on

5/28/2024 11:33:07 AM

Added threat detections

Name Severity
Behavior:Linux/FtpArchiveExfilFromWorldWritable.A severe
Behavior:Linux/FtpExfilFromWorldWritable.A severe
Behavior:Linux/FtpExfilFromWorldWritable.B severe
Behavior:Linux/HttpArchiveExfilFromWorldWritable.A severe
Behavior:Linux/SuspHTTPCommunication.A severe
HackTool:Linux/LinPeas.D!MTB high
Trojan:AndroidOS/Banker.U!MTB severe
Trojan:HTML/OLookPhish.N!MTB severe
Trojan:HTML/OLookPhish.O!MTB severe
Trojan:HTML/Phish.PRHK!MTB severe
Trojan:HTML/Phish.TIA!MTB severe
Trojan:MSIL/AgentTesla.KIUG!MTB severe
Trojan:MSIL/FormBook.DEEF!MTB severe
Trojan:MSIL/Stealer.SPXF!MTB severe
Trojan:VBS/Malscript.RG!MTB severe
Trojan:Win32/AutoitInject.ODAA!MTB severe
Trojan:Win32/Convagent.AMMI!MTB severe
TrojanSpy:Win32/Babar!MSR severe
Worm:Win32/Klez.E severe

Updated threat detections

Name Severity
Adware:MSIL/OpenSUpdater!MSR high
Adware:Win32/Multiverze high
Backdoor:MSIL/DCRat.YY!MTB severe
Backdoor:Win32/Rbot!pz severe
Backdoor:Win32/Zegost.BU severe
Backdoor:Win32/Zegost.L severe
Backdoor:Win32/Zegost.Q severe
Behavior:Linux/PossibleRansomActivity.B severe
Behavior:Linux/SystemInfo.A severe
BrowserModifier:Win32/Sasquor high
Exploit:O97M/CVE-2017-0199.CXT severe
Exploit:O97M/CVE-2017-11882.RVCK severe
HackTool:Win32/AutoKMS high
HackTool:Win32/crack high
HackTool:Win32/Crack!MTB high
HackTool:Win32/Cymulion high
HackTool:Win32/DefenderRmv!MTB high
HackTool:Win32/Keygen high
HackTool:Win32/Keygen!MTB high
HackTool:Win32/Patch!MSR high
HackTool:Win64/Mimikatz.A high
MonitoringTool:AndroidOS/MonitorMinor.BA!MTB severe
Ransom:Win32/LockbitCrypt.SV!MTB severe
Ransom:Win32/StopCrypt.MAPK!MTB severe
SoftwareBundler:Win32/Prepscram high
Trojan:AndroidOS/Obfus.D!MTB severe
Trojan:BAT/Runner.B severe
Trojan:HTML/Phish.AC!MTB severe
Trojan:JS/MalScript!MSR severe
Trojan:MSIL/AgentTesla!MTB severe
Trojan:MSIL/AgentTesla.MBYB!MTB severe
Trojan:MSIL/AgentTesla.MBYM!MTB severe
Trojan:MSIL/AgentTesla.MBZH!MTB severe
Trojan:MSIL/AgentTesla.PTHU!MTB severe
Trojan:MSIL/AgentTesla.RV!MTB severe
Trojan:MSIL/AgentTesla.STY severe
Trojan:MSIL/AgentTesla.WOWF!MTB severe
Trojan:MSIL/CymRan!pz severe
Trojan:MSIL/CymRan.ACA!MTB severe
Trojan:MSIL/FormBook.RPY!MTB severe
Trojan:MSIL/Injuke.JCAA!MTB severe
Trojan:MSIL/LokiBot.RDR!MTB severe
Trojan:MSIL/LummaStealer.AMMB!MTB severe
Trojan:MSIL/QuasarRat.RPZ!MTB severe
Trojan:MSIL/RedLine.ME!MTB severe
Trojan:MSIL/RedLineStealer.K!MTB severe
Trojan:MSIL/Seraph.RG!MTB severe
Trojan:MSIL/Tedy.AMME!MTB severe
Trojan:Win32/Acll severe
Trojan:Win32/Amadey.RPQ!MTB severe
Trojan:Win32/Asruex.A severe
Trojan:Win32/AutoitShellInj.E!MTB severe
Trojan:Win32/Casdet!rfn severe
Trojan:Win32/CryptInject.DZ!MTB severe
Trojan:Win32/Dorv.A severe
Trojan:Win32/Ekstak!MTB severe
Trojan:Win32/Ekstak.RY!MTB severe
Trojan:Win32/Farfli!MTB severe
Trojan:Win32/Farfli.TI!MTB severe
Trojan:Win32/Fauppod.A severe
Trojan:Win32/Fauppod.SPZX!MTB severe
Trojan:Win32/Flystudio!MTB severe
Trojan:Win32/Gepys.VDSK!MTB severe
Trojan:Win32/Grandoreiro.psyN!MTB severe
Trojan:Win32/Guildma.psyU!MTB severe
Trojan:Win32/Guloader.RPZ!MTB severe
Trojan:Win32/GuLoader.RVAG!MTB severe
Trojan:Win32/Injector!MSR severe
Trojan:Win32/Keylogger.AMBE!MTB severe
Trojan:Win32/Lazy!MTB severe
Trojan:Win32/Leonem severe
Trojan:Win32/LNKRunner.RF!MTB severe
Trojan:Win32/Lotok!pz severe
Trojan:Win32/Malgent severe
Trojan:Win32/Malgent!MSR severe
Trojan:Win32/Multiverze severe
Trojan:Win32/Neoreblamy!MTB severe
Trojan:Win32/Neoreblamy.RP!MTB severe
Trojan:Win32/Neoreblamy.RS!MTB severe
Trojan:Win32/OffLoader.SPMC!MTB severe
Trojan:Win32/Ramnit severe
Trojan:Win32/Redline.ML severe
Trojan:Win32/Redline.MRB!MTB severe
Trojan:Win32/RisePro.EC!MTB severe
Trojan:Win32/RisePro.RP!MTB severe
Trojan:Win32/RiseProStealer.AX!MTB severe
Trojan:Win32/Seheq!rfn severe
Trojan:Win32/SmokeLoader.PADO!MTB severe
Trojan:Win32/StealC.CCHV!MTB severe
Trojan:Win32/Stealerc.AMMF!MTB severe
Trojan:Win32/Strab.GPX severe
Trojan:Win32/Strab.GPX!MTB severe
Trojan:Win32/Swisyn.MBHW!MTB severe
Trojan:Win32/Tiggre!plock severe
Trojan:Win32/Tiggre!rfn severe
Trojan:Win32/VBClone severe
Trojan:Win32/VBClone.RG!MTB severe
Trojan:Win32/Vbclone.RPX!MTB severe
Trojan:Win32/Vindor!pz severe
Trojan:Win32/Ymacco.AA13 severe
Trojan:Win32/Zenpak.ASAD!MTB severe
Trojan:Win32/Zenpak.KAQ!MTB severe
Trojan:Win32/Zombie.A severe
Trojan:Win32/Zusy.GXB!MTB severe
Trojan:Win64/Coinminer.RB!MTB severe
Trojan:Win64/CymRan.B!MTB severe
Trojan:Win64/Lazy!MTB severe
Trojan:Win64/Malgent!MSR severe
Trojan:Win64/Malgent!MTB severe
Trojan:Win64/NSudo!MSR severe
Trojan:Win64/Zusy.AMBC!MTB severe
Trojan:Win64/Zusy.CTRG!MTB severe
TrojanDownloader:O97M/Emotet.ARJ!MTB severe
TrojanDownloader:Script/Malgent!MSR severe
TrojanDownloader:Win32/Esendi.B severe
TrojanDownloader:Win32/GhostRAT.I!MTB severe
TrojanDownloader:Win32/Nemucod severe
TrojanDownloader:Win32/Rugmi.HNI!MTB severe
TrojanDownloader:Win32/Unruy!pz severe
TrojanDropper:MSIL/Dorifel.AB!MTB severe
TrojanDropper:Win32/Muldrop.V!MTB severe
VirTool:MSIL/Aikaantivm.GG!MTB severe
VirTool:MSIL/Avant.A!MTB severe
VirTool:Python/Impntlmdmp.A severe
VirTool:Win32/Meterpreter!pz severe
VirTool:Win32/PeCloak!MTB severe
VirTool:Win32/VBInject.WX severe
Worm:Win32/AutoRun.XXY!bit severe
Worm:Win32/Bruhorn.B severe
Worm:Win32/Conustr.A severe
Worm:Win32/Goldrv.A severe
Worm:Win32/Multiverze severe
Worm:Win32/Nevereg.A severe
Worm:Win32/SillyShareCopy.AS severe
Worm:Win32/Vobfus.gen!D severe