Windows Defender automatically deletes "v1.13.6 UMD (Development)" about underscore

[jgonggrijp]

Thanks for reporting. Have you reported the issue to Windows Defender as well?

If I understand the article correctly, Gootloader is malware that, at some point, has included Underscore source code in order to masquerade as legitimate JS code. Apparently, Windows Defender now considers Underscore source code as a fingerprint for Gootloader. I am afraid there is nothing we can do about this as Underscore maintainers; Windows Defender needs to pick smarter fingerprints.

[gavJackson]

wow that sucks, so this malware thing has sucked in your code to look legit and now Windows Defender thinks your code is dodgy.

i'll see if i can report it to windows defender as other libraries could get sucked in too - and then Windows Defender will automatically deletes those js files too (which is super confusing btw!)

[jgonggrijp]

Thanks!