W32/Ursnif.BW!tr.spy

description-logoAnalysis

W32/Ursnif.BW!tr.spy is classified as a spy trojan.
A spy trojan is a type of malware that has the capability to gather information from the infected system without consent from the user. This information is then sent to a remote attacker.
The Fortinet Antivirus Analyst Team is constantly updating our descriptions. Please check the FortiGuard Encyclopedia regularly for updates.

recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiGate
Extreme
FortiClient
Extended
FortiMail
Extended
FortiSandbox
Extended
FortiWeb
Extended
Web Application Firewall
Extended
FortiIsolator
Extended
FortiDeceptor
Extended
FortiEDR

Version Updates

Date Version Detail
2023-03-07 91.01211
2023-01-28 91.00062
2022-08-30 90.05531
2022-05-25 90.02622
2021-07-27 87.00933
2019-07-23 70.19000 Sig Updated
2019-06-08 69.11800 Sig Updated
2019-05-14 68.51300 Sig Updated
2019-04-12 67.75300 Sig Updated
2019-04-02 67.50600 Sig Updated