Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Nov 25, 2023 | Updated May 27, 2025

Trojan:JS/BeaverTail!MSR

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

Trojan:JS/BeaverTail.D!dha is a custom malware developed by an emerging threat actor from North Korea that Microsoft tracks as Storm-1877.

The malware targets software developers and was part of a “contagious interview campaign”.

Microsoft Defender Antivirus automatically removes threats as they are detected. However, many infections can leave remnant files and system changes. Updating your antimalware definitions and running a full scan might help address these remnant artifacts.

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

Follow us