W32/Azorult.GPHI!tr.pws

description-logoAnalysis

W32/Azorult.GPHI!tr.pws is classified as a password-stealing trojan.
A password-stealing trojan searches the infected system for passwords and sends them to a remote attacker.
The Fortinet Antivirus Analyst Team is constantly updating our descriptions. Please check the FortiGuard Encyclopedia regularly for updates.

recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2019-03-05 66.83600 Sig Updated
2019-02-04 66.14800 Sig Updated
2019-02-04 66.14300 Sig Updated
2019-02-04 66.14200 Sig Updated
2019-02-04 66.13000 Sig Updated
2019-02-03 66.12500 Sig Updated
2019-02-03 66.11100 Sig Updated
2019-02-02 66.10100 Sig Added