Change logs for security intelligence update version 1.413.712.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Security intelligence update version

Released on

7/5/2024 7:01:07 PM

Added threat detections

Name	Severity
Behavior:Win32/AttackIQ!DownloadMem.A	severe
Exploit:O97M/CVE-2017-0199.RVGD	severe
Exploit:Win64/CVE-2018-8120.MA!MTB	severe
Trojan:HTML/Phish.DEQ!MTB	severe
Trojan:HTML/Phish.DER!MTB	severe
Trojan:HTML/Phish.HNBW!MTB	severe
Trojan:HTML/Phish.VCG!MTB	severe
Trojan:HTML/Phish.VGAJ!MTB	severe
Trojan:HTML/ScrInject.QVAA!MTB	severe
Trojan:HTML/ScrInject.QWAA!MTB	severe
Trojan:JS/AgentTesla.DEC!MTB	severe
Trojan:JS/Redirector.VGAK!MTB	severe
Trojan:MSIL/AgentTesla.MBXG!MTB	severe
Trojan:MSIL/AgentTesla.MBXH!MTB	severe
Trojan:MSIL/AgentTesla.RDBY!MTB	severe
Trojan:MSIL/AgentTesla.RVHJ!MTB	severe
Trojan:MSIL/AsyncRAT.BF!MTB	severe
Trojan:MSIL/AsyncRAT.BG!MTB	severe
Trojan:MSIL/DllInject.MVB!MTB	severe
Trojan:MSIL/FileCoder.MJ!MTB	severe
Trojan:MSIL/Heracles.AMAJ	severe
Trojan:MSIL/RedLine.RDEW!MTB	severe
Trojan:PDF/Phish.FFN!MTB	severe
Trojan:PDF/Phish.FFO!MTB	severe
Trojan:PowerShell/Stealer.MG!MTB	severe
Trojan:Win32/AutoitInject.PHAA!MTB	severe
Trojan:Win32/DarkGate.MKD!MTB	severe
Trojan:Win32/DarkGate.MKF!MTB	severe
Trojan:Win32/DelfInject.SS	severe
Trojan:Win32/Ekstak.GPO!MTB	severe
Trojan:Win32/Ekstak.SPVF!MTB	severe
Trojan:Win32/Ekstak.SQQP!MTB	severe
Trojan:Win32/Fesber.EA!MTB	severe
Trojan:Win32/GuLoader.KIII	severe
Trojan:Win32/Neoreklami.MBYR!MTB	severe
Trojan:Win32/Vobfus.MBYK!MTB	severe
Trojan:Win64/CobaltStrike.ACO!MTB	severe
Trojan:Win64/CobaltStrike.ACR!MTB	severe
Trojan:Win64/Cosmu.EC!MTB	severe
Trojan:Win64/Rootkit.OJAA!MTB	severe
Trojan:Win64/Tedy.MD!MTB	severe
TrojanDownloader:JS/Qakbot.AA	severe
TrojanDownloader:PDF/Remcos.J!MTB	severe
TrojanDownloader:VBS/AgentTesla.QIJ!MTB	severe

Updated threat detections

Name	Severity
Adware:Win32/Babylon	high
Adware:Win32/Multiverze	high
Backdoor:ASP/ShellAttckPP.A	severe
Backdoor:Linux/Mirai!MTB	severe
Backdoor:MSIL/Quasar.GG!MTB	severe
Backdoor:MSIL/SuspAdsyncBin.D	severe
Backdoor:MSIL/XWormRAT!atmn	severe
Backdoor:MSIL/XWormRAT.J!MTB	severe
Backdoor:PHP/Remoteshell.C	severe
Backdoor:Win32/Berbew.AA!MTB	severe
Backdoor:Win32/Bifrose.IQ	severe
Backdoor:Win32/FlyAgent!pz	severe
Backdoor:Win64/BruteRatel.ZZ	severe
Behavior:Win32/GenMemQuery.A!cbl	severe
Behavior:Win32/GenMemQuery.B!cbl	severe
Behavior:Win32/GenMemQuery.C!cbl	severe
Behavior:Win32/InitiateSmsScan.A	severe
Behavior:Win32/Ransomware!GenB.FA	severe
Behavior:Win32/RemoteDroppedProcInjector.A	severe
Behavior:Win32/RemoteDroppedProcInjector.B	severe
Behavior:Win32/RemoteDroppedProcInjector.C	severe
Behavior:Win32/SendTestMemQuery.A	severe
Behavior:Win32/SysCodeInjected.C	severe
Behavior:Win32/SysCodeInjector.C	severe
Behavior:Win32/TriggerMemoryScan.A	severe
BrowserModifier:Win32/Shafmia!MTB	high
Exploit:MacOS/CVE-2022-46689.A!MTB	severe
Exploit:O97M/CVE-2017-0199.RVFD	severe
Exploit:O97M/CVE-2017-0199.RVFO!MTB	severe
Exploit:O97M/CVE-2017-0199.RVGU	severe
Exploit:O97M/CVE-2017-11882!KZH	severe
Exploit:O97M/CVE-2017-11882.A!MTB	severe
Exploit:O97M/CVE-2017-11882.VRP!MTB	severe
HackTool:MSIL/BruteForce!MTB	high
HackTool:Python/Impacket	high
HackTool:Win32/AndroidUnlocker!MTB	high
HackTool:Win32/AutoKMS	high
HackTool:Win32/AutoKMS!pz	high
HackTool:Win32/CheatEngine	high
HackTool:Win32/crack	high
HackTool:Win32/Crack!MSR	high
HackTool:Win32/Crack!MTB	high
HackTool:Win32/Cymulion	high
HackTool:Win32/DefenderControl!MSR	high
HackTool:Win32/GameHack!MSR	high
HackTool:Win32/Keygen	high
HackTool:Win32/Mimikatz.H	high
HackTool:Win32/Patcher!MTB	high
HackTool:Win32/Redcap!MSR	high
HackTool:Win32/RemoteAdmin!MTB	high
HackTool:Win32/Silentall!MTB	high
HackTool:Win64/Cymulion!pz	high
Joke:Win32/Buttons	moderate
Misleading:Win64/Lodi	high
Program:AndroidOS/Multiverze	high
PWS:Win32/Multiverze	severe
Ransom:Win32/Blacksuit!MTB	severe
Ransom:Win32/Lockbit.HA!MTB	severe
Ransom:Win64/Mallox.CCCM!MTB	severe
SoftwareBundler:Win32/Funshion	high
Tool:AndroidOS/Multiverze	moderate
Trojan:AndroidOS/Multiverze	severe
Trojan:BAT/Runner.B	severe
Trojan:HTML/Casdet!rfn	severe
Trojan:HTML/Phish!MSR	severe
Trojan:HTML/Phish.C	severe
Trojan:HTML/Phish.PASJ!MTB	severe
Trojan:HTML/Phish.PH!MTB	severe
Trojan:HTML/Redirector.HNAF!MTB	severe
Trojan:JS/Cryxos.DA!MTB	severe
Trojan:Linux/Multiverze	severe
Trojan:MSIL/AgentTesla!MTB	severe
Trojan:MSIL/AgentTesla.ALAW	severe
Trojan:MSIL/AgentTesla.EQK!MTB	severe
Trojan:MSIL/AgentTesla.EVN!MTB	severe
Trojan:MSIL/AgentTesla.KXZK!MTB	severe
Trojan:MSIL/AgentTesla.RVHI	severe
Trojan:MSIL/AgentTesla.RVHI!MTB	severe
Trojan:MSIL/AgentTesla.SMRG	severe
Trojan:MSIL/AgentTesla.SNNS	severe
Trojan:MSIL/AsyncRAT!atmn	severe
Trojan:MSIL/AsyncRAT.S!MTB	severe
Trojan:MSIL/CymRan!pz	severe
Trojan:MSIL/CymRan.ACA!MTB	severe
Trojan:MSIL/CymRan.ACY!MTB	severe
Trojan:MSIL/Cymulate!pz	severe
Trojan:MSIL/Cymulate.ACY!MTB	severe
Trojan:MSIL/DarkTortilla!MTB	severe
Trojan:MSIL/Dridex!pz	severe
Trojan:MSIL/Formbook.NED!MTB	severe
Trojan:MSIL/Formbook.RDAR!MTB	severe
Trojan:MSIL/Heracles.AMAJ!MTB	severe
Trojan:MSIL/Injuke.SPA!MTB	severe
Trojan:MSIL/PureLogStealer.QSAA!MTB	severe
Trojan:MSIL/RedLine.ASH!MTB	severe
Trojan:MSIL/Samas.A!MTB	severe
Trojan:MSIL/SmallDownloader!MTB	severe
Trojan:MSIL/SnakeKeylogger.AMAC!MTB	severe
Trojan:MSIL/SpyNoon.AMAI!MTB	severe
Trojan:MSIL/SpyNoon.AMAJ!MTB	severe
Trojan:MSIL/Stealer.MG!MTB	severe
Trojan:MSIL/SuspMsilInArcEmail.AA	severe
Trojan:MSIL/Taskun.AMMF!MTB	severe
Trojan:MSIL/Taskun.ASCP!MTB	severe
Trojan:MSIL/Tiny.MA!MTB	severe
Trojan:MSIL/Tisifi.PR	severe
Trojan:MSIL/TurtleLoader.AC	severe
Trojan:MSIL/XWorm.AMAI!MTB	severe
Trojan:MSIL/XWorm.C!MTB	severe
Trojan:MSIL/XWormRAT	severe
Trojan:MSIL/XWormRAT.C!MTB	severe
Trojan:O97M/Phish!MSR	severe
Trojan:PDF/Phish!MTB	severe
Trojan:PDF/Phish.TK!MTB	severe
Trojan:PDF/Phish.VCZ!MTB	severe
Trojan:PowerShell/PoshKeylogger.C	severe
Trojan:Script/GuLoader.RP!MTB	severe
Trojan:Script/Malgent!MSR	severe
Trojan:VBS/Emotet	severe
Trojan:VBS/Emotet.PA	severe
Trojan:VBS/GuLoader.RTCW!MTB	severe
Trojan:VBS/Obfuse	severe
Trojan:VBS/YoTechY.HZA!MTB	severe
Trojan:Win32/Acll	severe
Trojan:Win32/AgentTesla!ml	severe
Trojan:Win32/AgentTesla.SKAV	severe
Trojan:Win32/AgentTesla.SKAV!MTB	severe
Trojan:Win32/Amadey.PAER!MTB	severe
Trojan:Win32/AutoitShellInj.E!MTB	severe
Trojan:Win32/AveMaria!pz	severe
Trojan:Win32/BlackMoon.Z!MTB	severe
Trojan:Win32/Bumat!rts	high
Trojan:Win32/Casdet!rfn	severe
Trojan:Win32/Clipbanker!ic	severe
Trojan:Win32/Cobaltstrike!Beac	severe
Trojan:Win32/CoinMiner!pz	severe
Trojan:Win32/Convagent.AMAI!MTB	severe
Trojan:Win32/CryptInject	severe
Trojan:Win32/CymRan.A!MTB	severe
Trojan:Win32/CymRan.ACR!MTB	severe
Trojan:Win32/DefenseEvasion!rfn	severe
Trojan:Win32/Dridex.GD!MTB	severe
Trojan:Win32/Ekstak!MTB	severe
Trojan:Win32/Ekstak.MBFI!MTB	severe
Trojan:Win32/Ekstak.QTAA!MTB	severe
Trojan:Win32/Ekstak.RD!MTB	severe
Trojan:Win32/Emotet.AB!MTB	severe
Trojan:Win32/Emotetcrypt.HR!MTB	severe
Trojan:Win32/Emotetcrypt.HS!MTB	severe
Trojan:Win32/Fabookie.RZ!MTB	severe
Trojan:Win32/Farfli!pz	severe
Trojan:Win32/Farfli.RZ!MTB	severe
Trojan:Win32/Fauppod.A	severe
Trojan:Win32/FormBook.NF!MTB	severe
Trojan:Win32/Grandoreiro.psyM!MTB	severe
Trojan:Win32/Guloader!pz	severe
Trojan:Win32/GuLoader.KGFK!MTB	severe
Trojan:Win32/GuLoader.KHGK!MTB	severe
Trojan:Win32/GuLoader.KLKK	severe
Trojan:Win32/Guloader.RP!MTB	severe
Trojan:Win32/ICLoader.JL!MTB	severe
Trojan:Win32/ICLoader.JLK!MTB	severe
Trojan:Win32/ICLoader.RPZ!MTB	severe
Trojan:Win32/Injuke.HNA!MTB	severe
Trojan:Win32/InstallCore	severe
Trojan:Win32/Killav.DR	severe
Trojan:Win32/Killav.DV	severe
Trojan:Win32/Lazy.AMMH!MTB	severe
Trojan:Win32/Leonem	severe
Trojan:Win32/Lokibot.ANRI!MTB	severe
Trojan:Win32/LummaStealer.MWW!MTB	severe
Trojan:Win32/LummaStealer.RO!MTB	severe
Trojan:Win32/Malgent	severe
Trojan:Win32/Malgent!MSR	severe
Trojan:Win32/Malgent!MTB	severe
Trojan:Win32/Mamson.A!ac	severe
Trojan:Win32/Mekotio!MTB	severe
Trojan:Win32/Multiverze	severe
Trojan:Win32/Neoreblamy.AG!MTB	severe
Trojan:Win32/Neoreblamy.EC!MTB	severe
Trojan:Win32/Neoreblamy.RP!MTB	severe
Trojan:Win32/Neoreblamy.RS!MTB	severe
Trojan:Win32/Occamy.C3C	severe
Trojan:Win32/Occamy.C42	severe
Trojan:Win32/OffLoader	severe
Trojan:Win32/PhishLeonem	severe
Trojan:Win32/Phorpiex.RB!MTB	severe
Trojan:Win32/PovertyStealer.RDA!MTB	severe
Trojan:Win32/Redcap.NR!MTB	severe
Trojan:Win32/Redline.DAO!MTB	severe
Trojan:Win32/Remcos.RVBQ!MTB	severe
Trojan:Win32/Rozena.MA!MTB	severe
Trojan:Win32/Rugmi!MTB	severe
Trojan:Win32/Sdbot!RND	severe
Trojan:Win32/Seheq!rfn	severe
Trojan:Win32/Smokeloader!ic	severe
Trojan:Win32/SmokeLoader!MTB	severe
Trojan:Win32/SmokeLoader.ASGH!MTB	severe
Trojan:Win32/SmokeLoader.FRS!MTB	severe
Trojan:Win32/SmokeLoader.FT!MTB	severe
Trojan:Win32/Smokeloader.GMD!MTB	severe
Trojan:Win32/SmokeLoader.WRD!MTB	severe
Trojan:Win32/Startpage!pz	severe
Trojan:Win32/Stealer.GPAD!MTB	severe
Trojan:Win32/Stealerc.GAB	severe
Trojan:Win32/Stealerc.GAB!MTB	severe
Trojan:Win32/Strab.AME!MTB	severe
Trojan:Win32/Strab.GPCX	severe
Trojan:Win32/Strab.GPCX!MTB	severe
Trojan:Win32/Swisyn.ADA!MTB	severe
Trojan:Win32/Tnega!ml	severe
Trojan:Win32/Tnega.PAM!MTB	severe
Trojan:Win32/Tonmye!pz	severe
Trojan:Win32/Trickbot!Mod	severe
Trojan:Win32/Vindor!pz	severe
Trojan:Win32/WinLNK!MTB	severe
Trojan:Win32/WinLNK.HNAK!MTB	severe
Trojan:Win32/WinLNK.HNAP!MTB	severe
Trojan:Win32/WinLNK.VDAV!MTB	severe
Trojan:Win32/Ymacco.AAF5	severe
Trojan:Win32/Zenpak!pz	severe
Trojan:Win32/Zenpak.GQZ!MTB	severe
Trojan:Win32/Zenpak.RDM!MTB	severe
Trojan:Win32/Znyonm	severe
Trojan:Win32/Zusy.AMMI!MTB	severe
Trojan:Win64/CobaltStrike.ACB!MTB	severe
Trojan:Win64/CobaltStrike.ACL!MTB	severe
Trojan:Win64/CobaltStrike.ACT!MTB	severe
Trojan:Win64/Convagent!MTB	severe
Trojan:Win64/Convagent.CCJB!MTB	severe
Trojan:Win64/CymRan.ACA!MTB	severe
Trojan:Win64/CymRan.ACN!MTB	severe
Trojan:Win64/CymRan.ACY!MTB	severe
Trojan:Win64/CymRan.B!MTB	severe
Trojan:Win64/CymRun.RDA!MTB	severe
Trojan:Win64/Cymulate.ACM!MTB	severe
Trojan:Win64/CymulateRansomTest.LK!MTB	severe
Trojan:Win64/CymulateRansomTest.MKW!MTB	severe
Trojan:Win64/Cymuta.AH!MTB	severe
Trojan:Win64/Diztakun!MTB	severe
Trojan:Win64/DriverLoader.DA!MTB	severe
Trojan:Win64/Emotet.BK!MTB	severe
Trojan:Win64/Lazy.AME!MTB	severe
Trojan:Win64/Metasploit.CRTD!MTB	severe
Trojan:Win64/NSudo!MSR	severe
Trojan:Win64/Rozena.EM!MTB	severe
Trojan:Win64/SpyLoader.AB!MTB	severe
Trojan:Win64/Zusy!MTB	severe
Trojan:WinNT/Sality	severe
Trojan:XML/SuspBuild.MJ!ibt	severe
TrojanDownloader:JS/FakeUpdates.GP!MSR	severe
TrojanDownloader:JS/Nemucod.NLV!MTB	severe
TrojanDownloader:O97M/Obfuse!MTB	severe
TrojanDownloader:O97M/obfuse.DR!MTB	severe
TrojanDownloader:O97M/Powdow.SIK!MTB	severe
TrojanDownloader:VBS/Casbaneiro.C!MTB	severe
TrojanDownloader:Win32/Agent.P	severe
TrojanDownloader:Win32/Small	severe
TrojanDropper:AndroidOS/SAgent.B!MTB	severe
TrojanDropper:PowerShell/Cobacis.A	severe
TrojanDropper:Win32/Addrop.C!bit	severe
TrojanDropper:Win32/Dapato.BH!MTB	severe
TrojanDropper:Win32/Malgent!MTB	severe
TrojanProxy:Win32/Acapaladat.B	severe
TrojanSpy:Win32/Keylogger.RT!MTB	severe
VirTool:Win32/Kekeo.B	severe
VirTool:Win32/Killwifip.A	severe
VirTool:Win32/Sliver.D!MTB	severe
Worm:Win32/AutoRun.XXY!bit	severe
Worm:Win32/Mofksys.NA!MTB	severe
Worm:Win32/Renamer.A!MSR	severe
Worm:Win32/Vobfus.F	severe