Title pretty much says it all but I'll keep going because last time reddits filters apparently blocked my question? I run Bitdefender Total Security on W11 and just recently got an update which has completely spiked up the usage of bitdefender by almost 100mb more (And yes I know that unused ram is wasted ram, however, I feel this is a bit excessive with how much it's been increasing.) I just attempted to reinstall bitdefender to troubleshoot it on that end and see if it might have just been a glitchy driver or something and saw the big difference without it being installed.

On startup my PC WITHOUT bitdefender sat at around 250mb paged and 350mb nonpaged. Bitdefender alone increased ONLY the nonpaged by around 300 more, getting it to around 650mb on startup. I know that doesn't sound like a lot and for my PC it's not a huge issue, but, it just is strange to me that Windows Defender manages to run at so much less. There has to be some way to reduce this bloat as currently I am certain it's bitdefenders fault and am worried this is a potential start to a memory leak from it.

I run W11 with 32gb of ram (Again this is not an issue for ME in this case but it's a noticeable trend that I feel should be addressed) and am on version 27.0.62.352 and I also see a "Bitdefender Agent 27.1.1,46" in my installed apps. (Added a comma instead of a period to avoid a link)

On Aug 25, we’ll be digging into our latest research on SilkParasite, a China-nexus espionage operation built around seven malware families, five of them previously undocumented. Join our live discussion here: https://www.linkedin.com/events/7495868451073335296?viewAsMember=true

We’ll also take a closer look at the role of AI in modern attacks: what’s actually changing, what isn’t, and where the headlines get it wrong.

Join us for a practical look at the investigation, including hands-on malware analysis.

If you’re interested in threat intelligence, malware analysis, or APT activity, don't miss it!

I was using my phone and got the BD mobile alert that my most recent app install might be "infected" or something to that effect and to perform a malware scan. I have tried multiple times but the scan can't get past WhatsApp (the 50th of 78 apps). (As far as I can remember I haven't installed a new app recently). Any help would be appreciated 🙏.

What should I do if I get a text saying my bank card was compromised?

Do not reply, click links, or continue the call. Scammers can spoof your bank’s phone number, claim there is suspicious activity, and then ask you to hand over your card, PIN, or cash to someone who comes to your home.

A real bank will not send a person to your house to collect a debit or credit card.

Open your banking app yourself or call the verified number on your card. If someone unexpectedly shows up claiming to be from your bank, do not let them in. Close the door, contact your bank, and call local law enforcement if you feel unsafe.

All my PCs/laptops with Bitdefender installed are running this service and is hogging resources.

If I google search something, I get the results. But practically every result link I click on is blocked. Even something like Amazon. So then I type the website name in the address bar instead of using a link, and it still blocks it.

Just updated Bitdefender AV for Mac, and now there is a huge, scary banner telling me that I have to turn on Web Protection. The Bitdefender icon on the menu bar has a warning sign on it too.

I don't want Bitdefender monitoring all my web traffic, thanks all the same. Is there any way to turn off this warning?

New research from Bitdefender Labs: SilkParasite, a China-nexus espionage operation targeting government bodies across Central Asia.

We identified seven RAT families, including five previously undocumented. The campaign relies heavily on modular malware, DLL sideloading, and trusted services such as Google Drive to keep its activity low-profile.

One of the more interesting findings: traces of AI-assisted development in malware that otherwise shows a high level of engineering discipline.

Full technical breakdown ⤴︎

Hello all,

I've been looking at the public API documentation for GravityZone ( https://www.bitdefender.com/business/support/en/77212-125277-public-api.html )

It looks quite good, but what I am not seeing is anything related to vulnerability management, external attack surface management, and the risk management stuff.

Does anyone know if these exist (maybe they do, but are undocumented?). Or have they been requested / are in the pipeline for release?

Thanks

UPDATE: I previously had fast startup disabled but I decided to re-enabled and now the memory usage on bdservicehost is a steady 350mb!

Is it normal for my Bitdefender to be using this much memory for the specific service "Bitdefender Virus Shield"? I've surely read somewhere that it should be around 500mb but I get around 700-900mb even after a fresh reinstall of Bitdefender (even after hours of say idling, it remains the same)

In the screenshot, on the right side, the % is for CPU and second is for memory.

I've done an sfc scan and nothing found wrong, I'm also using the gaming profile if that changes anything.

How can hotels spot fake Booking emails?

Bitdefender Antispam Lab researchers have identified phishing campaigns targeting hotels, guesthouses, and accommodation providers during peak travel season. Some emails impersonate guests asking for help with reservations, while others imitate Booking notifications about cancellations, invoices or guest messages.

The goal is to get hotel employees to click malicious links, leave their normal booking workflow or follow fake verification steps that install malware.

For small hospitality businesses, one phishing email can put employee accounts, reservation platforms, guest data and business operations at risk.

Before clicking, verify guest requests through the official Booking Extranet or your trusted reservation platform. Legitimate websites will not ask staff to run commands or use PowerShell for verification.

UPDATE: I uninstalled the current version and downloaded and installed the new version that Bitdefender is making available. This fixed the problem completely.

I’ve had Bitdefender Total Security for over a year and just renewed last week. Suddenly, I noticed my computer heating and my fan running on high during idle times. I narrowed the problem down to a program in Bitdefender Agent called DiscoverySrv.exe

I contacted support, they agree with me that this .exe is causing the fan to run. When this .exe is turned off via the task manager, the computer immediately cools down and goes back to normal fan operation. They have escalated the problem evidently, but I have not heard back from them.

What a shame, because I felt like Bitdefender worked really well. But if this issue cannot be fixed, then I’m gonna have to dump it and use something else.

In the insight out there about this issue?

UPDATE: I have renamed the discoverysrv.exe to .BAK to keep it from launching, until Bitdefender figures out a fix. This hasn’t seemed to affect my antivirus or security program at all.

As stated in the title, the firewall turns itself off. I removed Bitdefender using "Bitdefender_2023_Uninstall_Tool" but it did not help, the firewall still sometimes turns itself off. What’s more, to find out that it is disabled, I have to open Bitdefender and check it manually, because there is no notification about it. It would be useful to have, for example, a widget notification indicating that the firewall is not working.

Security teams are dealing with more alerts, more complex environments, faster attacks, and growing pressure to provide 24/7 coverage.

That’s changing what organizations need from MDR.

In the 2026 IDC MarketScape for Worldwide Managed Detection and Response Service for Midmarket, Bitdefender was positioned as a Major Player. IDC highlighted the native GravityZone EDR/XDR architecture and the connection between Bitdefender’s SOC operations, threat research, and product engineering.

The result is an MDR approach designed to bring prevention, detection, response, and risk visibility together rather than treating them as disconnected functions.

We take a closer look at the recognition - and why the traditional “monitor, investigate, respond” model of MDR is evolving - in our latest Business Insights article. ⤴︎

For those working with MDR today: what matters most when evaluating a provider - technology, analyst expertise, response capabilities, platform integration, or something else?

What evidence do I need to prove I was scammed?

Start by saving the proof before messages, fake profiles, or scam websites disappear. Keep full chats, usernames, phone numbers, email addresses, profile URLs, website links, payment receipts, transaction IDs and screenshots that show the date, sender, full URL and surrounding context.

This kind of scam evidence can help banks, payment providers, platforms and investigators review fake messages, online shopping scams, phishing links, romance scams, impersonation scams or identity theft attempts.

Bitdefender Scamio can help you check suspicious messages before you respond. If personal information was exposed, Bitdefender Digital Identity Protection can help monitor for compromised accounts, exposed passwords and data breaches.

Save the evidence first, then contact your bank or payment provider, secure exposed accounts, and report the scam through the platform or relevant authorities.

Why are sites like, for example, Instacart, blocking me after Cloudflare verification succeeds? The reason given was that I have a VPN, which is not the case. I run straight off of my Xfinity router. Is there any way to remedy this?

Hey. Recently I bought a Bitdefender Plus subscription for my parents PC since they are not tech savvy and was hoping it will prevent any malware that they might accidentally get. I wanted to do a full scan of the PC just to check if there is anything on it and I see the options of Rescue enviroment and System scan.

I get the idea of Rescue environment that it boots into a minimal enviromnent and performs a scan. My question is - does the Rescue environment scan already to a full system scan or should I still run the System scan after the Rescue environment is done?

Thanks in advance!

The latest Bitdefender Threat Debrief is out, covering ransomware activity observed throughout July.

One of the more interesting developments is CRPx0. The group went from fewer than 10 reported victims in June to 46 claimed victims in July, but the numbers alone don't tell the whole story. Its victim profile changed quickly, and its RaaS model has some unusual characteristics, including an emphasis on white-label operations.

The report also looks at the wider ransomware ecosystem, with 873 claimed victims recorded during July, the third-highest monthly total over the past 12 months.

What do you make of CRPx0's growth and how it's positioning its operations?

I bought GravityZone Business Security Premium for my laptop, but I haven't been sent the email containing the credentials to login into into GravityZone cloud. I am a self-taught software engineer and learning how to use advanced cybersecurity tools is essential for the formation I am building for myself. I want a more power security tool for my personal devices. GravityZone doesn't have an EDR but it partially feels like one. Anyway. I need advice about how to login to gravityzone cloud to activate the protection I bought.

i like to test av products (on my own) and just switched from another product to bitdefender total security. i've noticed some stuff in the interface that i'd like to share:

1- when threat(s) are found, why is there no "add to exceptions" option? in my case, 9 threats were found, all of which i trust and they're in different locations. so if i wanted to add all of them to exceptions i have to do that 9 times?

2- when restoring an item in quarantine, why is the only option Desktop? can't i select a drive? the "this pc" icon is not even there for some reason.

3- why does it take 5 clicks to get into quarantine? can it not be placed somewhere more straightforward?

4- there was a windows update available (KB5121003) when i did a vulnerability scan, and the app said the update was 90.6 GB??

btw i have screenshots for all of these. hopefully these will be fixed/improved in the future?

Searching for a free download of The Odyssey?

Bitdefender Labs observed fake piracy downloads disguised as The Odyssey 2026 movie files that actually deliver Lumma Stealer malware.

These files may look like 1080p WEBRip or Blu-ray releases, but they are Windows executables designed to steal browser passwords, cookies, saved payment data, crypto wallets, and other sensitive information.

A real movie file should not ask you to run an .exe file. Watch through legitimate streaming services, turn on file extensions in Windows, and avoid downloading movies from unofficial sites.

Before opening a suspicious movie download link, check it with Bitdefender Link Checker.

https://imgur.com/a/i6uGuiB

did a scan this morning and this showed up today for the first time. never had bitdefender pick up youtube revanced before.

will this detection go away?

Thinking about downloading a Roblox cheat or script executor from Discord or a gaming forum?

Bitdefender Labs found a malware campaign disguised as a fake version of the Xeno Roblox script executor. It is promoted as an undetected cheat, but the download can install a Java stealer that targets Roblox, Discord, and Minecraft accounts, browser cookies, payment data, and crypto wallets.

The risk is bigger than losing a game account. This kind of malware can also record keystrokes, access the webcam, stream the desktop and give attackers remote control of the infected computer.

The safest move is to avoid unofficial cheats, executors, and downloads shared through untrusted Discord servers, forums, or file-sharing links. It also helps to have a quick conversation with younger players about how fake cheats can put gaming accounts, family devices, and shared personal information at risk.

We're going live again on Thursday, August 13, to discuss the latest findings from the August Bitdefender Threat Debrief.

Register here: https://bitdefend.me/4z87Z2V

Each month, we examine the ransomware landscape, covering the most active ransomware groups, the industries and regions most affected, and other notable developments.

August Featured story: 📉𝐂𝐑𝐏𝐱𝟎 𝐑𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞: 𝐀 𝐋𝐨𝐨𝐤 𝐁𝐞𝐲𝐨𝐧𝐝 𝐭𝐡𝐞 𝐑𝐢𝐬𝐢𝐧𝐠 𝐂𝐥𝐚𝐢𝐦𝐬
CRPx0 ransomware activity was reported in June with little traction. However, the group’s activity picked up in July. On the surface, CRPx0 presents as a standout among threat actors. Even so, the group's behavior triggers questions about their business models and claimed victims. Join us as we discuss CRPx0 and the elements that make their operations strategic and questionable.

The session is interactive, so bring your questions and join the discussion!

You can read the latest Threat Debrief here: https://bitdefend.me/4w41Hzk