Featured content

Good morning y'all, hope to find you well. I'm curious wether MalwareTips' users use any kind of default-deny approach in their systems. This includes an anti-executable like CyberLock, an Application Control module like Kaspersky's, a hardener like Hard_Configurator, any SRP software, or even your own implemented policies. If you do, what do you use? If you don't, why don't you think it's necessary? Cheers :)
Administrator protection If possible, please provide an explanation. Thank you. P.S. Multiple votes are possible for PCs other than the one you normally use.
Thread 'What is the longest duration you have observed for a vendor to ultimately verdict a False Negative as malware?'
Last year, it took Avast more than 3 months to finally detect a false negative fake 360, which had been VT 30+ or maybe more for a long time, as malware. This time we talk about MD. Although not been that long until now. It has been a few weeks since I submitted the following false negative fake APP to Microsoft, and I resubmitted it again this week, but MD just missed it. Is it common, and does it happen often to all vendors? The sample: VirusTotal Anyrun report: Analysis...
Thread 'Missed script malware by signature analysis'
Someone has just posted got ransomware after running script command on some YT video claimed to download a game. Visted the video page, copied, the command, saved as cmd file, uploaded to VT,HA, and K online scanner. VT: VirusTotal HA: Free Automated Malware Analysis Service - powered by Falcon Sandbox K: Kaspersky Threat Intelligence Portal NB: The malware disabled MD.
Features Thorough in-depth cleaning of system critical areas Find and delete old Windows versions, updates, and system caches Reduced and clearer user interfaces Massively accelerated and more efficient cleaners Super-fast 1-click optimization based on new cleaner modules Up to 75% faster cleaners Convenient cookie manager for “safe” cookies Updated start page with CPU speedometer and up-to-date hardware details Access to a Windows license key Window scaling and docking based on Windows...
Hey MalwareTips community, In 2025, with cyber threats like zero-days, ransomware, and AI-powered attacks on the rise, Host-based Intrusion Prevention Systems (HIPS) are still a thing in many antivirus suites for Windows. HIPS monitors running processes, files, and registry keys using behavioral analysis to block suspicious activity in real-time, going beyond signature-based detection. Tools like ESET's HIPS (updated as of June 2025) protect against malware trying to tamper with your...
Hey MalwareTips community, As Windows integrates AI deeper with Copilot in 2025, it's a hot topic for home users juggling productivity and security. Microsoft touts it as a smart assistant for tasks like summarizing docs or generating ideas, but concerns linger over data privacy and access. For instance, Concentric AI warns of over-permissioning risks where Copilot could access unintended personal data on your PC. Microsoft's own docs highlight built-in protections like blocking harmful...
Hey MalwareTips community, Biometrics like fingerprints, facial recognition, and iris scans are touted as the next big thing in cybersecurity for 2025, promising passwordless convenience amid rising threats. But with AI deepfakes and spoofing on the rise, are they truly secure? Recent reports show mixed views: SentinelOne highlights biometrics reducing reliance on credentials via risk-based auth, while Splashtop emphasizes biometric encryption for enhanced security using unique traits to...
https://www.neowin.net/news/windows-11-26h1-is-reportedly-coming-early-next-year-for-certain-devices/
Thread 'Problem with sandbox'
Hey everyone, I’m seeing a weird one: when I open a link from eM Client into Windows Sandbox, the Sandbox spins up and Edge launches… but all I get is a permanent white square. The link never loads. eM Client also throws a permissions warning on the first try. If I start the Sandbox with a .wsb that disables the virtual GPU, Edge works like normal. This tiny config does the trick: Is there a way to make Sandbox always start with vGPU disabled (some “default profile” or policy) so I don’t...
What I am looking for is not "I run KaV and Malwarebytes" rather "I fire off sysinternals and look at age of the file, fire off tool Z and look at entropy etc etc etc" I feel bored and would love to expand my knowledge and understanding
Hey MalwareTips community, Deepfakes are exploding in 2025, and they're not just for funny videos anymore – they're fueling serious cyber threats. According to recent stats, there were 179 deepfake incidents in Q1 2025 alone, surpassing all of 2024 by 19% and marking a 680% rise in such attacks. CrowdStrike predicts audio deepfakes encountered by businesses will double this year, with awareness high but defenses lagging badly. Kaspersky reports a 3.3% jump in phishing between Q1 and Q2...
Hey MalwareTips community, As we hit November 2025, I've been diving into the latest antivirus test results, and Windows Defender (Microsoft Defender Antivirus) is crushing it. According to AV-Comparatives' Malware Protection Test from September 2025, Defender achieved a 100% online protection rate against nearly 10,000 malware samples, tying with top performers like ESET, G Data, and McAfee. AV-Test's July-August 2025 evaluation gave it perfect 100% scores across protection categories...
Thread 'Opera One R3 rollout continues with new ways to customize your Tab Islands'
Hey all, This fall, we’re starting to deliver an updated version of our flagship browser for desktop: Opera One R3. Before we ship the whole package, you’ll be able to test its new features in the early access version of Opera One. We kicked off last week with the introduction of Opera One AI, and in today’s second round of updates we’re introducing new ways to customize Tab Islands. Tab Islands have been a core aspect of Opera One since its launch as it created a new and more intuitive...
Read the full Story here: https://www.bleepingcomputer.com/news/microsoft/windows-10-update-bug-triggers-incorrect-end-of-support-alerts/
Full Story: https://www.bleepingcomputer.com/news/google/google-confirms-ai-search-will-have-ads-but-they-may-look-different/
More on: https://www.bleepingcomputer.com/news/artificial-intelligence/openai-is-going-meta-route-as-it-considers-memory-based-ads-on-chatgpt/
Thread 'Extending Bluetooth® LE Audio on Windows 11 with shared audio (preview)'
Today’s Windows 11 Insider Preview Build (26220.7051) for Dev & Beta Channels begins gradual rollout of shared audio (preview), a new experience being previewed that allows your audio to be shared between two separate headphones, speakers, earbuds, or hearing aids. Built on top of Bluetooth LE Audio broadcast technology, shared audio lets your supported Windows 11 PC transmit an audio stream to two Bluetooth audio accessories at the same time. Update 10/31: This preview is currently only...
In early October 2025, reports confirmed that support and security updates for Windows 10 are ending. In the UK, a consumer survey suggested that around 5 million users intend to keep using Windows 10 after updates stop, leaving them exposed to malware, viruses, and cyber-attacks. ( The Guardian ) With no further patches or security fixes scheduled, home users on Windows 10 face elevated risks: Unpatched systems are more vulnerable to new malware and exploits. Applications running on...