FLUIDLEECH: Loader Masquerading as Antivirus
FLUIDLEECH is a loader used in the UAC-0145 campaign, disguised as software for removing computer viruses to trick users.
Tag: antivirus
FortiGuard: Fortinet’s Security Services
FortiGuard is Fortinet's security services suite, including antivirus and threat intelligence. It flags Ousaban samples and provides indicators of compromise.
Windows Defender: Microsoft Antivirus Product
Windows Defender is Microsoft's built-in antivirus product that can be bypassed by ClickFix techniques that avoid file-based detection.
AMSI: Anti-Malware Scan Interface
AMSI is a Windows feature that allows antivirus to scan scripts before execution. The new ClickFix delivery method is designed to bypass…
Microsoft Malware Protection Engine (mpengine.dll)
Core scanning engine for Microsoft Defender and other antimalware products, affected by the RoguePlanet vulnerability.
Microsoft Defender Real-Time Protection
Microsoft Defender is an antivirus and endpoint protection product. Qilin ransomware affiliates disabled its Real-Time Protection feature prior to deploying ransomware to…