Skip to main content

Change logs for security intelligence update version 1.459.28.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Released on

9/3/2026 9:08:18 AM

Added threat detections

Name Severity
Behavior:Win32/Mamadut.IV severe
Behavior:Win32/SuspInnoOffer.A!mapsi severe
Exploit:O97M/CVE-2017-0199.XX!MTB severe
MonitoringTool:JS/RenoTrack.LTSN!MTB severe
Trojan:HTML/FakeLogin.EM!atmn severe
Trojan:HTML/FakeLogin.EN!atmn severe
Trojan:HTML/Phish.CW!atmn severe
Trojan:HTML/Phish.CX!atmn severe
Trojan:HTML/Phish.CY!atmn severe
Trojan:HTML/Phish.DA!atmn severe
Trojan:HTML/Redirector.BM!atmn severe
Trojan:HTML/Redirector.BN!atmn severe
Trojan:HTML/Redirector.BO!atmn severe
Trojan:HTML/Redirector.BP!atmn severe
Trojan:JS/EtherRatz.A!MTB severe
Trojan:JS/EtherRatz.B!MTB severe
Trojan:Linux/Malgent!MSR severe
Trojan:MSIL/Bodegun.AB!MTB severe
Trojan:MSIL/EtherRAT.DA!MTB severe
Trojan:NPM/ProcSteal.DC!MTB severe
Trojan:PDF/Phish.BH!atmn severe
Trojan:PDF/Phish.BJ!atmn severe
Trojan:Win64/ThornGate.B!dha severe
VirTool:Script/LummaLoad.A severe

Updated threat detections

Name Severity
Adware:MacOS/Multiverze!rfn high
Adware:Python/Multiverze!rfn high
Backdoor:MSIL/AsyncRAT!rfn severe
Backdoor:MSIL/AsyncRat.AD!MTB severe
Backdoor:MSIL/Quasar!rfn severe
Backdoor:PHP/Remoteshell.A severe
Backdoor:Python/Meterpreter.C severe
Backdoor:Win64/Vankul!rfn severe
Behavior:Win32/Mamadut.EF severe
Behavior:Win32/ProcDump.A severe
Behavior:Win32/QuartzMoor!apsi severe
Behavior:Win32/SuspMem.B severe
Behavior:Win32/SuspMem.C severe
Behavior:Win64/PolishedKettle.A severe
Exploit:HTML/IframeRef.gen severe
Exploit:Linux/DirtyFrag!rfn severe
Exploit:O97M/CVE-2017-0199.E severe
Exploit:O97M/CVE-2025-53770.DA!ams severe
Exploit:Win32/AppDomainManagerAssemblyHijack.AM severe
Exploit:Win32/AppDomainManagerConfigHijack.AM severe
HackTool:AndroidOS/Mesploit!rfn high
HackTool:Python/Impacket!MSR high
HackTool:Win32/CobaltStrike!rfn high
HackTool:Win32/crack high
HackTool:Win32/Keygen high
HackTool:Win32/Keygen!AMTB high
Misleading:Win32/Lodi high
Ransom:Win32/CerberCrypt!rfn severe
Ransom:Win32/Clop!rfn severe
Ransom:Win32/Nokonoko!rfn severe
Ransom:Win32/Qilinloader!rfn severe
Ransom:Win32/Royal!rfn severe
Ransom:Win64/Akira!rfn severe
Ransom:Win64/Azov.psyA!MTB severe
Ransom:Win64/LockBit!rfn severe
Ransom:Win64/Magniber!rfn severe
Ransom:Win64/PrinceRansom!rfn severe
Spyware:Script/Multiverze!rfn high
Trojan:AndroidOS/Anubis!rfn severe
Trojan:AndroidOS/Autopay!rfn severe
Trojan:AndroidOS/AVerseFalc!rfn severe
Trojan:AndroidOS/BTMOBRat!rfn severe
Trojan:AndroidOS/FakeApp!rfn severe
Trojan:AndroidOS/Spynote!rfn severe
Trojan:BAT/Alien!rfn severe
Trojan:BAT/Qakbot!rfn severe
Trojan:BAT/Stealer!rfn severe
Trojan:HTA/Phish!MSR severe
Trojan:HTML/FakeAlert!rfn severe
Trojan:HTML/Phish.CV!atmn severe
Trojan:HTML/Qakbot!rfn severe
Trojan:JS/Cryxos!rfn severe
Trojan:JS/ExtRat.LTSN!MTB severe
Trojan:JS/Pterodo!rfn severe
Trojan:JS/PureLogStealer.S!MTB severe
Trojan:JS/QakbotLNK!rfn severe
Trojan:JS/Ursnif!MTB severe
Trojan:JS/Ursnif!rfn severe
Trojan:Linux/Multiverze!rfn severe
Trojan:MacOS/Multiverze!rfn severe
Trojan:MSIL/AgentTesla!rfn severe
Trojan:MSIL/AsyncRat!rfn severe
Trojan:MSIL/Jalapeno!rfn severe
Trojan:MSIL/Lorenz!rfn severe
Trojan:MSIL/Polazert!rfn severe
Trojan:MSIL/Samas!rfn severe
Trojan:NPM/Agent!AMTB severe
Trojan:NPM/Downloader!AMTB severe
Trojan:NPM/Loader!AMTB severe
Trojan:NPM/PackageSpam!AMTB severe
Trojan:NPM/Stealer!AMTB severe
Trojan:O97M/DDownloader!rfn severe
Trojan:PDF/Phish!atmn severe
Trojan:PDF/Phish!rfn severe
Trojan:PDF/Phish.BI!atmn severe
Trojan:PowerShell/Malgent!MSR severe
Trojan:PowerShell/Pterodo!rfn severe
Trojan:PowerShell/QakBot!rfn severe
Trojan:PowerShell/XWorm.BA!MTB severe
Trojan:Python/Multiverze!rfn severe
Trojan:Script/Multiverze!rfn severe
Trojan:VBS/Emotet!rfn severe
Trojan:VBS/Guloader.SPHF!MTB severe
Trojan:VBS/IcedID!rfn severe
Trojan:VBS/Obfuse!rfn severe
Trojan:VBS/Qakbot!rfn severe
Trojan:Win32/Alevaul!rfn severe
Trojan:Win32/AresLdr!rfn severe
Trojan:Win32/Bluteal severe
Trojan:Win32/Boxter!rfn severe
Trojan:Win32/Casdet!rfn severe
Trojan:Win32/CobaltStrike!rfn severe
Trojan:Win32/Coroxy!rfn severe
Trojan:Win32/CryptInject!rfn severe
Trojan:Win32/DllInject!rfn severe
Trojan:Win32/Dridex!rfn severe
Trojan:Win32/Egairtigado!rfn severe
Trojan:Win32/Eqtonex!bit severe
Trojan:Win32/Etset!rfn severe
Trojan:Win32/Fauppod!rfn severe
Trojan:Win32/Kepavll!rfn severe
Trojan:Win32/KoiLoader!rfn severe
Trojan:Win32/Leonem!rfn severe
Trojan:Win32/LummaStealer severe
Trojan:Win32/MalDrv!MSR severe
Trojan:Win32/Malgent severe
Trojan:Win32/Malgent!MSR severe
Trojan:Win32/Malgent!MTB severe
Trojan:Win32/Malgent!rfn severe
Trojan:Win32/MereTam!rfn severe
Trojan:Win32/PlugX!rfn severe
Trojan:Win32/Pomal!rfn severe
Trojan:Win32/Povertystealer!rfn severe
Trojan:Win32/Pterodo!rfn severe
Trojan:Win32/Qakbot!rfn severe
Trojan:Win32/QBotCrypt!rfn severe
Trojan:Win32/Qwexlafiba!rfn severe
Trojan:Win32/Ravartar!rfn severe
Trojan:Win32/Rozena!rfn severe
Trojan:Win32/Seheq!rfn severe
Trojan:Win32/Skeeyah.A!bit severe
Trojan:Win32/Skeeyah.B!rfn severe
Trojan:Win32/Suloc!rfn severe
Trojan:Win32/Suschil!rfn severe
Trojan:Win32/Synder!rfn severe
Trojan:Win32/Tnega!MSR severe
Trojan:Win32/Vilsel!rfn severe
Trojan:Win32/Vindor!rfn severe
Trojan:Win32/Yomal!rfn severe
Trojan:Win32/Zloader!rfn severe
Trojan:Win32/Znyonm!rfn severe
Trojan:Win64/BlackWidow!rfn severe
Trojan:Win64/CobaltStrike!rfn severe
Trojan:Win64/CoinMiner!rfn severe
Trojan:Win64/CryptInject!rfn severe
Trojan:Win64/DisguisedXMRigMiner!MTB severe
Trojan:Win64/DLLHijack!MTB severe
Trojan:Win64/DllHijack!rfn severe
Trojan:Win64/Emotet!rfn severe
Trojan:Win64/EmotetPacker!rfn severe
Trojan:Win64/FateGrab!rfn severe
Trojan:Win64/IcedID!rfn severe
Trojan:Win64/Injector.EO severe
Trojan:Win64/Latrodectus!rfn severe
Trojan:Win64/Lazy!rfn severe
Trojan:Win64/Malgent!MTB severe
Trojan:Win64/Midie!rfn severe
Trojan:Win64/Qakbot!rfn severe
Trojan:Win64/Reflo.HNS!MTB severe
Trojan:Win64/RustyStealer!MTB severe
Trojan:Win64/ShellcodeRunner!MTB severe
Trojan:Win64/SpyLoader!rfn severe
Trojan:Win64/Tedy!MTB severe
Trojan:Win64/Tedy.KK!MTB severe
Trojan:Win64/Vidar!MTB severe
Trojan:Win64/WinGoObfusc!rfn severe
Trojan:Win64/ZLoader!rfn severe
Trojan:Win64/ZLoaderE!rfn severe
TrojanDownloader:BAT/QakBotLoader!rfn severe
TrojanDownloader:JS/Nemucod severe
TrojanDownloader:JS/Nemucod!rfn severe
TrojanDownloader:JS/Qakbot!rfn severe
TrojanDownloader:O97M/Emotet!rfn severe
TrojanDownloader:PowerShell/Obfuse!rfn severe
TrojanDownloader:Win32/Multiverze!rfn severe
TrojanDownloader:Win32/Rugmi!rfn severe
TrojanDropper:AndroidOS/Banker!rfn severe
TrojanSpy:AndroidOS/Spynote!rfn severe
VirTool:Java/Meterpreter.A severe
VirTool:Win32/Tabloid!MTB severe
Worm:Win32/FakeFolder.KAA!MTB severe
Worm:Win32/Voots.A severe