Strange Chinese APT Interest in Buying Batches of AV Products

May 6, 2021 9:40:50 AM By Stu Sjouwerman

The Chinese military unit was recently accused of carrying out a years-long cyber espionage. The accusation from Japanese authorities was due to China's People Liberation Army buying ...

Stealthy 'Netwalker' Ransomware Using Windows Explorer And 'Art of Deception' To Infect Enterprise Networks

Mar 5, 2020 2:02:10 PM By Stu Sjouwerman

Researchers at Quick Heal Security Labs have discovered a new strain of the “Mailto” ransomware nicknamed “Netwalker" that uses the art of deception to evade detection. The new strain ...

It’s Baaaaaaaack! Emotet Trojan Rears Its Ugly Head Once Again After a 3-Month Vacation

Oct 15, 2019 6:42:38 AM By Stu Sjouwerman

One of the most dangerous pieces of malware to-date, this trojan-turned-botnet has come back after a brief hiatus and appears to be a part of a new spear phishing campaign targeting ...

Virtual Hard Disk Images Containing Malware Are Ignored by Windows and Antivirus Engines

Oct 11, 2019 7:19:53 AM By Stu Sjouwerman

This disturbing find by a CERT researcher demonstrates how attackers can encode malicious files within a Virtual Hard Disk (VHD) image that acts in the same way as a ZIP archive.

Why Is Windows Defender The World's No. 1 Antivirus With More Than Half A Billion EndPoints?

Aug 3, 2019 11:16:31 AM By Stu Sjouwerman

Having been inside the AntiVirus software industry for quite a while, and building an AV tool from the ground up, when I saw Redmond start acquiring several small AV companies in 2008 and ...

Windows Defender Gets a New Name: Microsoft Defender

Jul 22, 2019 7:24:20 AM By Stu Sjouwerman

Bleepingcomputer reported: "Windows Defender is being rebranded to Microsoft Defender to indicate that it now part of a cross platform family of products. This includes enterprise ...

[Heads-Up] If This Is True It's A Disaster. Three Major US Antivirus Companies Breached? ***UPDATED

May 12, 2019 10:09:57 AM By Stu Sjouwerman

ARSTECHNICA is getting me worried here. We were all at KB4-CON in Orlando the last few days, and during the conference word got to me that security researchers found out that high-profile ...

AV-Test compares 19 Antivirus Tools: Windows Defender Reaches Maximum Detection Score

Apr 1, 2019 6:50:16 AM By Stu Sjouwerman

The German AV-Test lab compared 19 antivirus products, including the free Windows Defender which comes with the Win10 OS. Defender reached the max detection score, which was better than a ...

Watch Out Banks: New PDF Attack Avoids Antivirus Detection

Nov 16, 2018 11:49:48 AM By Stu Sjouwerman

The latest attack from the Cobalt Gang targeting banking institutions used specific tactics to ensure AV doesn’t detect the malicious PDF at the heart of the attack.

Sandboxed Defender: Game-Changing Antivirus

Oct 30, 2018 7:26:41 AM By Stu Sjouwerman

With Microsoft’s latest release of Windows Defender running in a virtual sandbox (the first of its kind), it may be time to focus your energies – and budget – on other parts of your ...

Adwind Trojan Uses Phishing To Circumvent Antivirus And Infect Workstations

Sep 25, 2018 7:25:20 AM By Stu Sjouwerman

Charlie Osborne reported at ZDNet that Adwind, a Remote Access Trojan (RAT) previously connected to attacks against industries worldwide, is back with a new toolkit designed to trick ...

Advanced Malware Targets the Telecom Sector And Bypasses Antivirus

Sep 4, 2018 5:32:47 PM By Stu Sjouwerman

The telecommunication service industry is experiencing more advanced malware threats than any other industry group. Researchers at Lastline discovered that ninety percent of malware ...

SANS: "Less Than Half of Cyberattacks Detected via Antivirus"

Jul 18, 2018 1:19:21 PM By Stu Sjouwerman

We have been saying here for a while that antivirus is dead, but SANS just confirmed it in a new report that starts with: "Companies are buying next-gen antivirus and fileless attack ...

Why is Windows 10 Rapidly Gaining Ground in The Enterprise While Win7 Gets Ditched?

May 27, 2018 10:36:45 AM By Stu Sjouwerman

Duo Security is a provider of secure login/access tools, and they just released their yearly Trusted Access Report with some very interesting data. Here Is The Summary Stats gathered from ...

Why are Antivirus Companies Promoting Security Awareness Training?

May 24, 2018 1:33:58 PM By Stu Sjouwerman

Today, the most surprising companies have jumped on the security awareness training bandwagon. Antivirus companies like Sophos, Kaspersky, Webroot and ESET are loudly promoting the fact ...

“Good Enough” Free AV Software Argues For Security Awareness Training

May 23, 2018 5:18:22 PM By Stu Sjouwerman

By Guest Blogger Win10 Guru Ed Tittel. A surprising number of security experts agree that most users shouldn’t pay for a traditional antimalware suite. Windows 10's built-in protection, ...

Report: Ransomware is the New Normal. 52% Have Lost Faith in Antivirus and 44% Agree AV is Dead

Mar 28, 2018 7:18:53 AM By Stu Sjouwerman

A new report on malware says that the majority of companies globally have been victims of ransomware in the last 12 months. 52% Have Lost Faith in Antivirus and 44% Agree AV is Dead A new ...

The AVCrypt Ransomware Tries To Uninstall Your AV Software

Mar 25, 2018 10:18:18 AM By Stu Sjouwerman

Larry Abrams at Bleepingcomputer reported this strain first: "A new ransomware named AVCrypt has been discovered that tries to uninstall existing security software before it encrypts a ...

SNAFU Some AV Tools Cause BSODs And Boot Failures After Meltdown Patches

Jan 10, 2018 7:19:52 AM By Stu Sjouwerman

Microsoft's patch to protect Windows computers from the Meltdown / Spectre "hardware bug" revealed the rootkit-like nature of many antivirus tools. Some AV products are incompatible with ...

Antivirus Software Doing The Complete Opposite And Spreading Malware

Nov 17, 2017 2:01:47 PM By Stu Sjouwerman

Nicknamed AVGater by Austria-based security consultant Florian Bogner, he discovered an exploit within Antivirus software that takes advantage of the “restore from quarantine” function ...

Security Awareness Training Blog

View Topics