Malware Can Be Downloaded in Microsoft Defender

US-based technology giant Microsoft Windows 10 A critical yet meaningless problem has been detected in the latest version of Microsoft Defender, the antivirus program offered by Microsoft. This issue involved reconfiguring Microsoft Defender so that it could even download malware. fortunately Microsoft Defender, although this software is available for download, it instantly detects the downloaded malware.

In studies conducted by a cyber security expert named Mohammad Askar, the "MpCmdRun.exeIt was discovered that the command line tool called ” can download malware. This discovery made Microsoft Defender vulnerable to hackers. that they can abuse It led to its addition to the list of Windows applications.

BleepingComputer, which conducted research on Microsoft Defender upon Askar's discovery, found that the feature in question could be implemented. 4.18.2007.9 or 4.18.2009.9 They found that it was added in coded versions. So how does Microsoft Defender help download malware? can hold a bowl? If you wish, let's take a closer look at how the incident happened.

According to the discovery made by Mohammad Askar, the command line tool called MpCmdRun.exe, which can be used with Microsoft Defender, is called "-DownloadFileA command line argument such as " has been added. When a user or hacker runs a command such as "-DownloadFile -url [url] -path [path_to_save_file]" in the command line tool, malware enters the computer. downloading.

BleepingComputer managed to download malware using Microsoft Defender

BleepingComputer, in its work on Microsoft Defender, investigated the issue that caused the cyber attack on wearable technology manufacturer Garmin.resource.exeHe managed to download the malware named "". However, as soon as the download process was completed, Microsoft Defender detected that the downloaded application was malicious by giving a new warning and took the necessary steps to prevent the user from downloading the malware. provided security.

It is unknown why Microsoft did such a thing to its own antivirus software. Microsoft has no response on this issue so far. explanation He didn't. However, the real problem here is the situation of consumers who use an antivirus program other than Microsoft Defender. That is, if a hacker infiltrates the targeted computer and uses Microsoft Defender malware If it downloads it, it is unclear how antivirus software other than Microsoft Defender will react to it. Microsoft is expected to make a statement on the subject.