We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Win32/Ganda
Detected by Microsoft Defender Antivirus
Aliases: No associated aliases
Summary
Windows Defender Antivirus detects and removes this threat.
Win32/Ganda is a mass-mailing worm that targets Microsoft Windows.
The worm sends a copy of itself as an e-mail attachment to email addresses that it finds on the infected computer. The e-mail may be in English or Swedish. The worm infects the computer when the user opens the attachment. Win32/Ganda can also exploit the Windows vulnerability described in Microsoft Security Bulletin MS01-020. Win32/Ganda.A@mm has a file-infector component that infects PE executable files.
Follow us
