Kovter becomes almost fileless, creates a new file type, and gets some new certificates
Trojan:Win32/Kovter is a well-known click-fraud malware which is challenging to detect and remove because of its file-less persistence on infected PCs.
-
-
Limited Periodic Scanning in Windows 10 to Provide Additional Malware Protection
Every month, Microsoft’s Malicious Software Removal Tool (MSRT) scans more than 500 million Windows devices for malware and malicious software. -
A brief discourse on ‘Changing browsing experience’
In response to questions we’ve received from the software distribution and monetization industry, and following our blog announcing our browser modifier policy update, we’d like to provide some details on what we refer to in our policy as “changing browsing experience”. -
MSRT April release features Bedep detection
As part of our ongoing effort to provide better malware protection, the Microsoft Malicious Software Removal Tool (MSRT) release this April will include detections for: In this blog, we’ll focus on the Bedep family of trojans. -
New feature in Office 2016 can block macros and help prevent infection
To help counter malware, we are releasing a new feature in Office 2016 that blocks macros from loading in certain high-risk scenarios. -
Keeping browsing experience in users’ hands
Our evaluation criteria describe the characteristics and behavior of malware and potentially unwanted applications and guide the proper identification of threats. -
Microsoft updates Trusted Root Certificate Program to reinforce trust in the Internet
At Microsoft, we are continuously working to deliver on our commitment to the security of our customers and their ecosystems. -
Microsoft Security Intelligence Report: Strontium
The Microsoft Security Intelligence Report (SIR) provides a regular snapshot of the current threat landscape, using data from more than 600 million computers worldwide. -
Understanding type confusion vulnerabilities: CVE-2015-0336
In March 2014, we observed a patched Adobe Flash vulnerability (CVE-2015-0336) being exploited in the wild. -
Cleaning up misleading advertisements
Microsoft is committed to protecting our customers and their Windows experience. -
MAPS in the cloud: How can it help your enterprise?
(Note: Microsoft Active Protection Service is now called Windows Defender Antivirus cloud protection service. -
Your Browser is (not) Locked
Most ransomware has a binary file that needs to be executed before it can infect your PC.
