Microsoft Anti Malware Software Interface News Today

Sophos researchers today published a report on updates to Agent Tesla, a family of remote access Trojan (RAT) malware that has grown more popular in recent months. Its developers are buckling down on defense evasion with several techniques, such as targeting Microsofts Anti-Malware Software Interface (AMSI), to slip past security tools and remain persistent on a device. Agent Tesla, offered as a form of malware-as-a-service, has been active since 2014 and remains a common threat to Windows mach...

On Tuesday, Sophos researchers said that two new variants of the Remote Access Trojan (RAT) are targeting Microsoft Anti-Malware Software Interface (AMSI), scanning and analysis software designed to prevent malware infections from taking hold.  Agent Tesla operators will now attempt to tamper with AMSI to degrade its defenses and remove endpoint protection at the point of execution. If successful, this allows the malware to deploy its full payload.  First discovered in 2014, Agent Tesla is a...