# Discourse updates - Microsoft Defender reports detection of Wacatac malware

**URL:** <https://meta.discourse.org/t/discourse-updates-microsoft-defender-reports-detection-of-wacatac-malware/348004>\
**Category:** Product Support\
**Created:** [January 20, 2025, 11:50am UTC](https://meta.discourse.org/t/discourse-updates-microsoft-defender-reports-detection-of-wacatac-malware/348004 "2025-01-20T11:50:03Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![MiaZ](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@MiaZ](https://meta.discourse.org/u/MiaZ)\
**Post date:** [January 20, 2025, 11:50am UTC](https://meta.discourse.org/t/discourse-updates-microsoft-defender-reports-detection-of-wacatac-malware/348004/1 "2025-01-20T11:50:03Z")

</div>

Hi,

We have a self-hosted instance of Discourse on a virtual machine and after applying most recent Discourse updates [v3.4.0.beta3 +431](https://github.com/discourse/discourse/commit/89ff7d51e6b49e7046cd06b0e6f6df8e81e14a45)we have received alert from Microsoft Defender about Wacatac malware:

 ![image](https://global.discourse-cdn.com/meta/original/4X/d/e/9/de96c01f8cf49b64dbd3cc98a60765f365ca31cc.png)

We have removed the file, restarted the virtual machine and now we´re waiting for another scan to run. This has already happened on December 2024 when we were pulling most recent Discourse updates.  
It seems that Wacatac is somehow coming via Discourse updates or it might also be a false positive…

Is anyone else facing this issue?

---

_[View the full topic](https://meta.discourse.org/t/discourse-updates-microsoft-defender-reports-detection-of-wacatac-malware/348004)._