HTML/Agent.A121!tr HTML/Agent.A121!tr is a generic detection for a trojan. This malware has been associated with the following Hafnium article/advisory: https://fndn.fortinet.net/FortiGuard-Alert-Outbreaks/Hafnium-Fabric-View/ The correlation has been established due to a database near/exact match on one of the sample/IOC/file hash indicated in the mentioned resource. MD5: 4b3039cf227c611c45d2242d1228a121 Sha256: b75f163ca9b9240bf4b37ad92bc7556b40a17e27c2b8ed5c8991385fe07d17d0 A quick view of this ASP/HTML code indicates the following: The malware references/checks a certain third party security vendor component xagt.exe The malware references/checks a certain third party security vendor component csfalconservice.exe
Make sure that your FortiGate/FortiClient system is using the latest AV database.
Quarantine/delete files that are detected and replace infected files with clean backup copies.
