We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanDownloader:MSIL/Rhadamanthys.A!MTB
Aliases: No associated aliases
Summary
This is a detection for a .NET malware that connects to a malicious URL, performs stealer activities, and tries to collect data from infected machines.
Read the following blogs for details on human-operated malware campaigns:
Microsoft Defender Antivirus automatically removes threats as they are detected. However, many infections can leave remnant files and system changes. Updating your antimalware definitions and running a full scan might help address these remnant artifacts.
Users can take the following steps to mitigate the threat:
- Keep your operating system and antivirus products up to date.
- Search for any suspicious or malicious application installed and remove anything that looks to be a possible threat.
- Look into the compromised accounts for any malware content or activity.
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.