Most recents (3)

@MsftSecIntel

Machine learning is a key driver in the constant evolution of security technologies at Microsoft. Machine learning allows Microsoft 365 to scale next-gen protection capabilities and enhance cloud-based, real-time blocking of new and unknown threats.

Machine learning classifiers protected customers from the #BadRabbit #ransomware outbreak just 14 minutes after the very first encounter using detonation-based malware classification in the cloud. cloudblogs.microsoft.com/microsoftsecur…

In May, machine learning and behavior-based detection foiled a massive #Dofoil (#SmokeLoader) campaign. Within milliseconds, multiple metadata-based in the cloud started blocking the threat at first sight, protecting more than 400K machines in 12 hours. cloudblogs.microsoft.com/microsoftsecur…

Read 7 tweets

Microsoft Security Intelligence

@MsftSecIntel

A couple of fresh malware campaigns in the past few days were halted by Windows Defender AV, whose cloud-based machine learning technologies detected and blocked #Hancitor and #Emotet malware runs at the onset.

The previously unknown #Hancitor and #Emotet variants, which were distributed via email, were flagged by various ML models. Our machine learning technologies combined results from multiple algorithms to correctly determine the malware.

#Hancitor is known for being a sophisticated malware that has been used in targeted attacks in the past and for using unusual APIs and memory injection techniques. #Emotet, on the other hand, is one of the most active banking malware today.

Read 5 tweets