VirusW32/Mifeng.AV!tr.pws
Analysis
W32/Mifeng.AV!tr.pws is classified as a password stealing trojan.
Password Stealing Trojan searches the infected system for passwords and send them to the hacker.
The Fortinet Anti-Virus Analyst Team is currently in the process of creating a detailed description for this virus.
Recommended Action
- FortiGate Systems
- Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.
FortiClient Systems
- Quarantine/delete files that are detected and replace infected files with clean backup copies.
Telemetry
Detection Availability
| FortiClient | |
|---|---|
| Extreme | |
| FortiMail | |
| Extreme | |
| FortiSandbox | |
| Extreme | |
| FortiWeb | |
| Extreme | |
| Web Application Firewall | |
| Extreme | |
| FortiIsolator | |
| Extreme | |
| FortiDeceptor | |
| Extreme | |
| FortiEDR |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-04-14 | 76.70200 | Sig Updated |
| 2020-03-10 | 75.86200 | Sig Updated |
| 2020-02-08 | 75.12000 | Sig Updated |
| 2020-01-10 | 74.43300 | Sig Added |
| 2019-12-31 | 74.20000 | Sig Updated |
| 2019-11-17 | 73.14200 | Sig Added |
| 2019-10-15 | 72.34800 | Sig Updated |
| 2019-09-24 | 71.84400 | Sig Updated |
| 2019-09-05 | 71.38500 | Sig Updated |
| 2019-09-05 | 71.38400 | Sig Updated |