virus logo Intrusion Prevention

Formbook.Botnet

description-logoDescription

This indicates that a system might be infected by Formbook Botnet.
Formbook is a malware that can steal password credentials, log key strokes, take screenshots, and execute remote commands. All botnet signatures from FortiOS 5.6 onwards are under IPS, and have their default action set to "Block".

affected-products-logoAffected Products

Any unprotected Windows system is vulnerable.

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2024-09-09 28.860
Modified
 Sig Added
2023-05-17 23.556
Modified
2022-09-21 22.398
Modified
 Sig Added
2021-11-22 18.200
Modified
 Sig Added
ID 47375
Created Feb 06, 2019
Updated Dec 02, 2024
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Default Action drop
Active
Affected OS Windows
Affected App Other
Profile Type Malware