description-logoDescription

This indicates that a system might be infected by Vidar Botnet.
Vidar is an infostealer malware that steals login credentials, credit card numbers, and cryptocurrency wallets. It can also download and install other malware. All botnet signatures from FortiOS 5.6 onwards are under IPS, and have their default action set to "Block".

affected-products-logoAffected Products

Any unprotected Windows system is vulnerable.

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2025-10-02 34.094
Modified
Sig Added
2025-08-28 34.073
Modified
Sig Added
2023-05-18 23.557
Modified
Sig Added
2021-09-21 18.162
New