We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win64/Latrodectus.PB!MTB
Detected by Microsoft Defender Antivirus
Aliases: No associated aliases
Summary
Trojan:Win64/Latrodectus.PB!MTB is a malicious software variant of the Latrodectus malware family, known for its ability to steal data, provide remote access to threat actors, and download additional harmful software.
To mitigate the issue, follow these steps:
- Thoroughly investigate the compromised device for malware and any signs of lateral movement.
- Apply security updates promptly, especially for the specified vulnerabilities, on all applications and operating systems. Consult the Microsoft Security Update Guide for comprehensive information on available Microsoft Security updates.
- Follow the principle of least privilege and maintain credential hygiene. Avoid using domain-wide, admin-level service accounts. Restrict local administrative privileges to mitigate the potential installation of remote access trojans (RATs) and other undesirable applications.
- Network segmentation is useful in constraining the propagation of malware infections. The process involves partitioning a network into smaller segments, effectively confining an infection to a single segment rather than permitting its unrestricted spread across the entire network.
- Promote the use of Microsoft Edge and other web browsers that support SmartScreen, a feature identifying and blocking malicious websites, including phishing sites, scam sites, and those hosting exploits or malware.
- Block the launch of downloaded executable content by disabling JavaScript or VBScript.
Follow us
