Skip to main content

Change logs for security intelligence update version 1.459.462.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Released on

9/29/2026 12:25:30 PM

Added threat detections

Name Severity
Backdoor:PHP/Dirtelti.UZ!AMTB severe
Backdoor:Win32/Zxshell!AMTB severe
Behavior:Win32/ChainRpcEndpConnect.C severe
Exploit:O97M/CVE-2017-0199.SU!AMTB severe
HackTool:PowerShell/AutoKMS.HC!AMTB high
Ransom:HTML/CryptoWall!AMTB severe
Spammer:O97M/Anonmail!AMTB severe
Trojan:AndroidOS/Clicker.B!AMTB severe
Trojan:AndroidOS/SAgnt.AT!AMTB severe
Trojan:Cargo/ProcmacSteal.DA!AMTB severe
Trojan:HTML/Redirector.PGDB!AMTB severe
Trojan:Java/Obfus.QAAA!AMTB severe
Trojan:JS/Cryptoload.SLAU!AMTB severe
Trojan:JS/MiniShaiHrd.ZA!AMTB severe
Trojan:JS/Obfusnpm.GVZ!AMTB severe
Trojan:JS/OtterCookie.HAB!AMTB severe
Trojan:JS/PhantomWorm.DA!AMTB severe
Trojan:JS/Redirector.NXB!AMTB severe
Trojan:JS/ShaiHulud.GPKF!AMTB severe
Trojan:JS/ShaiWorm.DV!AMTB severe
Trojan:JS/Stealer.GVE!AMTB severe
Trojan:JS/StrelaStealer.AMA!AMTB severe
Trojan:JS/VoidRat.DA!AMTB severe
Trojan:MSIL/Androm.MK!MTB severe
Trojan:MSIL/AsyncRAT.SE!MTB severe
Trojan:MSIL/AveMaria.NEK!AMTB severe
Trojan:MSIL/AzaleaRat.AKYB!AMTB severe
Trojan:MSIL/FormBook.CD!AMTB severe
Trojan:MSIL/WebShell.MK!MTB severe
Trojan:NPM/EvalLoader.ZPL!AMTB severe
Trojan:NPM/MiniShaiHrd.ZA!AMTB severe
Trojan:NPM/ProcSteal.DC!AMTB severe
Trojan:PowerShell/Powdow.JQQ!AMTB severe
Trojan:PowerShell/ReverseShell.HAB!AMTB severe
Trojan:Python/CryptoStealer!MTB severe
Trojan:Script/Cryxos.HAE!AMTB severe
Trojan:Script/Stealer.HAK!AMTB severe
Trojan:Script/Stealer.HBR!AMTB severe
Trojan:VBS/CVE-2025-55182.DE!AMTB severe
Trojan:VBS/Redirector.ZRF!AMTB severe
Trojan:VBS/Runner.HNAC!AMTB severe
Trojan:Win32/AutoitInject.DSK!AMTB severe
Trojan:Win32/Copak.BAB!AMTB severe
Trojan:Win32/DllInject.MA!AMTB severe
Trojan:Win32/Emotet.GGG!AMTB severe
Trojan:Win32/Farfli.KK!AMTB severe
Trojan:Win32/Genasep.A!AMTB severe
Trojan:Win32/Guloader.SLC!AMTB severe
Trojan:Win32/NetLoader.RPY!AMTB severe
Trojan:Win32/RedlineStealer!AMTB severe
Trojan:Win32/Smokeloader!AMTB severe
Trojan:Win32/Startpage.QF!AMTB severe
Trojan:Win32/Stealerc.GAB!AMTB severe
Trojan:Win32/Vilsel.AMAB!AMTB severe
Trojan:Win32/Virbox!AMTB severe
Trojan:Win32/WinLNK.SKT!AMTB severe
Trojan:Win32/Yogi.A!AMTB severe
Trojan:Win64/BazarLoader!AMTB severe
Trojan:Win64/BrowserStealer.KZ!AMTB severe
Trojan:Win64/ClipBanker.AC!AMTB severe
Trojan:Win64/Coinminer.A!AMTB severe
Trojan:Win64/PoolInject.KK!AMTB severe
Trojan:Win64/Qakbot.PC!AMTB severe
Trojan:Win64/Rugmi.YCC!AMTB severe
Trojan:Win64/Shellcode.A!AMTB severe
TrojanDownloader:JS/Qakbot.AA!AMTB severe
TrojanDownloader:O97M/Maldoc.DA!AMTB severe
TrojanDownloader:PowerShell/Zusy.WID!AMTB severe
TrojanDownloader:Win32/Stealer!AMTB severe
TrojanDropper:JS/Formbook.RS!MTB severe
TrojanProxy:Win32/Bunitu.Q!AMTB severe
VirTool:MSIL/Shaperz.A!AMTB severe
Virus:DOS/Bog!AMTB severe
Virus:Win32/Neshta!AMTB severe

Updated threat detections

Name Severity
Backdoor:Linux/Gafgyt!rfn severe
Backdoor:Win64/MeterpreterReverseShell!rfn severe
Behavior:Win32/AssertedFocus.BNG.A!dha severe
Behavior:Win64/PolishedKettle.A severe
Exploit:Linux/Agent!AMTB severe
HackTool:PowerShell/MalScript!MSR high
HackTool:Win32/AndroidUnlocker!AMTB high
HackTool:Win32/GameHack!AMTB high
HackTool:Win32/Keygen!AMTB high
HackTool:Win32/NSudo!AMTB high
HackTool:Win32/Patcher high
HackTool:Win64/CobaltStrike!rfn high
HackTool:Win64/NSudo!AMTB high
Ransom:Win32/Clop!rfn severe
Ransom:Win32/FileCoder.AB!MTB severe
Ransom:Win32/Flocked.YAD!MTB severe
Ransom:Win32/Prestige!rfn severe
Ransom:Win64/Filecoder!MTB severe
Ransom:Win64/Filecoder!rfn severe
Ransom:Win64/Magniber!rfn severe
SupportScam:Win32/Screcwon.MA!AMTB severe
SupportScam:Win32/Screwon.PRP!AMTB severe
Trojan:AndroidOS/Autopay!rfn severe
Trojan:AndroidOS/AVerseFalc!rfn severe
Trojan:HTML/Obfuscator.PGAC!AMTB severe
Trojan:HTML/Phish.HAU!AMTB severe
Trojan:HTML/Pterodo!rfn severe
Trojan:HTML/Redirector!AMTB severe
Trojan:HTML/Redirector.PAD!AMTB severe
Trojan:HTML/Redirector.PADI!AMTB severe
Trojan:JS/Base64ExfilSync.ZD!AMTB severe
Trojan:JS/ChatGPTStealer.GVA!AMTB severe
Trojan:JS/DotRat.DA!AMTB severe
Trojan:JS/ForgeRat.DA!AMTB severe
Trojan:JS/NpmSteal.DJ!AMTB severe
Trojan:JS/Obfuse!AMTB severe
Trojan:JS/Qakbot!rfn severe
Trojan:JS/Redirector!AMTB severe
Trojan:JS/Redirector.CT!AMTB severe
Trojan:Linux/KiteShield!AMTB severe
Trojan:Linux/Multiverze!rfn severe
Trojan:Linux/SshBrute severe
Trojan:MSIL/AsyncRAT.SE!MTB severe
Trojan:MSIL/CavMant.DA!AMTB severe
Trojan:MSIL/Malgent!MTB severe
Trojan:NPM/Stealer.HAU!AMTB severe
Trojan:NPM/Stealer.HBA!AMTB severe
Trojan:O97M/Phish!MSR severe
Trojan:PDF/Phish!AMTB severe
Trojan:PowerShell/Obfus!AMTB severe
Trojan:PowerShell/Obfuse!AMTB severe
Trojan:PowerShell/Runner.GP!MTB severe
Trojan:Script/Malgent!MSR severe
Trojan:Script/Multiverze!rfn severe
Trojan:Script/Stealer.HAE!AMTB severe
Trojan:Script/Stealer.HAQ!AMTB severe
Trojan:Script/Stealer.HAU!AMTB severe
Trojan:Script/Stealer.HAY!AMTB severe
Trojan:Script/Stealer.HBA!AMTB severe
Trojan:Script/Stealer.HBH!AMTB severe
Trojan:Script/Stealer.HBQ!AMTB severe
Trojan:Script/Stealer.HBR!AMTB severe
Trojan:Script/Wacatac severe
Trojan:VBS/Emotet!rfn severe
Trojan:VBS/Obfuse!AMTB severe
Trojan:VBS/Obfuse!rfn severe
Trojan:VBS/Pterodo!AMTB severe
Trojan:VBS/Qakbot!rfn severe
Trojan:VBS/Remcos!AMTB severe
Trojan:VBS/Stealer.PC!AMTB severe
Trojan:Win32/Agent!AMTB severe
Trojan:Win32/AutoIT!AMTB severe
Trojan:Win32/AutoitInject.AANB!AMTB severe
Trojan:Win32/BadJoke!rfn severe
Trojan:Win32/BigLNK.CMA!AMTB severe
Trojan:Win32/Bluteal!rfn severe
Trojan:Win32/Bobik!rfn severe
Trojan:Win32/Casdet!rfn severe
Trojan:Win32/CoinMiner!AMTB severe
Trojan:Win32/Convagent!MTB severe
Trojan:Win32/CoreWarrior!rfn severe
Trojan:Win32/DllInject!rfn severe
Trojan:Win32/DownNPM.YAB!AMTB severe
Trojan:Win32/Dridex!rfn severe
Trojan:Win32/Egairtigado!rfn severe
Trojan:Win32/Emotet.ARJ!AMTB severe
Trojan:Win32/EmotetCrypt.SS!AMTB severe
Trojan:Win32/EmotetCrypt.VAM!AMTB severe
Trojan:Win32/Fauppod!rfn severe
Trojan:Win32/Injector!MTB severe
Trojan:Win32/Kepavll!rfn severe
Trojan:Win32/Kryptik!AMTB severe
Trojan:Win32/Leonem!rfn severe
Trojan:Win32/Malgent severe
Trojan:Win32/Malgent!AMTB severe
Trojan:Win32/Malgent!MSR severe
Trojan:Win32/MarsStealer.MA!AMTB severe
Trojan:Win32/MereTam!rfn severe
Trojan:Win32/Obfuse!AMTB severe
Trojan:Win32/Obfuse.PR!AMTB severe
Trojan:Win32/Persistence severe
Trojan:Win32/Pomal!rfn severe
Trojan:Win32/Qakbot!rfn severe
Trojan:Win32/Qbot!rfn severe
Trojan:Win32/Qwexlafiba!rfn severe
Trojan:Win32/Ravartar!rfn severe
Trojan:Win32/Rozena!rfn severe
Trojan:Win32/Seheq!rfn severe
Trojan:Win32/Smokeloader!rfn severe
Trojan:Win32/Sonoko.A!rfn severe
Trojan:Win32/Suloc!rfn severe
Trojan:Win32/Suschil!rfn severe
Trojan:Win32/Trickbot!rfn severe
Trojan:Win32/Valleyrat!rfn severe
Trojan:Win32/VenomRAT!AMTB severe
Trojan:Win32/WinLNK!rfn severe
Trojan:Win32/WinLNK.LP!MTB severe
Trojan:Win32/WinLNK.MU!AMTB severe
Trojan:Win32/Yomal!rfn severe
Trojan:Win32/Znyonm!rfn severe
Trojan:Win64/Bumblebee!rfn severe
Trojan:Win64/Filecoder!MTB severe
Trojan:Win64/Injector.B!MTB severe
Trojan:Win64/ShellcodeRunner.NZC!AMTB severe
Trojan:Win64/Tedy!MTB severe
Trojan:Win64/Vidar!MTB severe
Trojan:Win64/Yogi!MTB severe
TrojanDownloader:BAT/QakBotLoader!rfn severe
TrojanDownloader:JS/Qakbot!rfn severe
TrojanDownloader:O97M/Emotet!rfn severe
TrojanDownloader:VBS/Obfus!AMTB severe
TrojanDropper:PowerShell/Doprimm!rfn severe
TrojanDropper:Win32/Malgent!AMTB severe
VirTool:PowerShell/MaleficAms severe
Virus:Win32/Vasor!AMTB severe
Virus:Win32/Virut!AMTB severe