nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Bitdefender scan found this? How worried should i be?

Karlito Vosa

Find more posts tagged with

Virus Scanner

bitdefender

Accepted answers

All comments

Flexx

https://community.bitdefender.com/en/discussion/100679/bitdefender-scan-found-this-how-worried-should-i-be

Since Bitdefender has detected and eliminated the malware, there's no need for you to worry anymore.

Regards

Karlito Vosa

Can i be sure it's gone? From what i've been told it could have been a very sophisticated virus meant to steal my personal info.

Flexx

https://community.bitdefender.com/en/discussion/comment/342142#Comment_342142

The detection "generic.beacon.marte" indicates that the file being scanned has been flagged as malicious and is likely associated with Cobalt Strike, a popular commercial penetration testing tool often misused by threat actors for malicious purposes.

Here's what you need to know:

Cobalt Strike: A sophisticated framework used for post-exploitation activities, allowing attackers to establish a foothold within a compromised network, laterally move, and exfiltrate sensitive data.
Beacon: The core component of Cobalt Strike, a lightweight, stealthy payload implanted on a victim's system, enabling communication with the attacker's command-and-control (C2) server.
Marte: Likely refers to a specific variant or configuration of the Cobalt Strike Beacon payload, possibly indicating additional features or obfuscation techniques.
Generic: Suggests that the detection is based on behavioral analysis or common characteristics associated with Cobalt Strike Beacons rather than a specific signature or file hash.

As @Scott mentioned in the previous comment, you can utilize various online antimalware scanners to ensure that no remnants of the infection remain on your system.

Regards

Alexandru_BD

Hi,

Exactly, when Bitdefender finds an infection on your computer, it usually takes automatic action against it and gets rid of the malware without requiring any input on your side. That's why it says 'Action taken - Deleted'.
You can of course run another scan with Bitdefender or even temp scanners and check the results.

https://www.bitdefender.com/consumer/support/answer/2576/

Let us know if the subsequent scans found anything.

Regards,

Alex

Karlito Vosa

I had my harddrive wiped and a new windows installed just in case but after Bitdefender removed this beacon the first time it never respawned. Is it possible that it was a false positive?

Alexandru_BD

We can't be sure of this. But I think if Bitdefender already took action and deleted the threat, there's nothing to worry about.