Update CyberSight RansomStopper

Discussion in 'Other Security for Windows' started by pablozi, Dec 5, 2017.

  1. pablozi

    pablozi Level 22
    Trusted

    Jun 14, 2011
    1,154
    4,914
    Null Island
    Windows 10
    Default-Deny
    Official Website:
    https://cybersight.com/products/free_home_personal/
    CyberSight, a new computer security company based in California, released the first version of the anti-ransomware software RansomStopper yesterday.

    RansomStopper is available as a free version for non-commercial use, and a paid version for commercial and Enterprise use.

    The program is compatible with Windows 7 and newer versions of the Microsoft Windows operating system, and CyberSight promises that it will stop ransomware before encryption of data occurs.

    Installation of the program is straightforward, as you just press next a couple of times to install the security application on the Windows machine.

    [​IMG]

    You are asked to enter your name and email address afterwards, and need to verify the email address before you may use the program. RansomStopper displays the "enter your data" prompt until you have confirmed the selected email address.

    The application itself offers little user controls. The interface lists four buttons at the bottom of the page that lead to allowed and blocked/quarantined processes, security alerts, and an update check.

    There are not any settings available, which means among other things that you cannot whitelist processes proactively for instance.

    The company explains on its website how RansomStopper works:

    Some of the key features:

    Prevention: Applies machine learning on files pre-execution to prevent them from infecting your system
    Deception: Honeypots and on-demand traps to catch ransomware before it impacts files
    Detection: Kernel level behavioral analysis on processes and files in real-time
    Automatic Response: Automatically stops attacks, including Zero-Day attacks, by blocking processes and quarantining files

    Website: Free Home Personal – Cybersight
    FAQ: faq – Cybersight
    Download: https://download.cybersight.com/

    Source: ghacks.net
     
  2. Opcode

    Opcode Level 18
    Content Creator

    Aug 17, 2017
    890
    6,285
    Caille
    Windows 10
    From their home-page:
    That is quite a bold statement is it not... I know it is just marketing but...
     
  3. boredog

    boredog Level 8

    Jul 5, 2016
    387
    809
    Retired
    usa
    Windows 10
    Malwarebytes
    And
    - Does RansomStopper stop all types of Ransomware?

    "Yes! Regardless of whether the ransomware is from a new or existing strain, RansomStopper can stop any type of ransomware due to the powerful behavioral approach that is applied. "

    I do like their web site though. Looks professional.
    Cruelsister ?
     
  4. HarborFront

    HarborFront Level 33
    Content Creator

    Oct 9, 2016
    2,295
    5,748
    Far East
    How about protection for MBR/UEFI?
     
  5. ZeroDay

    ZeroDay Level 22

    Aug 17, 2013
    1,116
    3,177
    Birmingham UK
    Windows 10
    Kaspersky
    Looks interesting indeed.
     
  6. Opcode

    Opcode Level 18
    Content Creator

    Aug 17, 2017
    890
    6,285
    Caille
    Windows 10
    Hmmm the marketing is too much for my cup of tea.

    They don't even know how the technology behind many AVs even works. Tell what that says to Avast, AVG, Emsisoft, Kaspersky, G-Data... They all focus on behavioural analysis just as much as signatures. Avast and AVG are not as far in the party as the others I mentioned I don't think but they still count. Qihoo and other vendors as well... Most your popular average vendors which "made it" in the industry probably use some form of machine learning/artificial intelligence and/or behavioural analysis, and by "made it" I'm referring to those that come top time and time again in tests and are generally well-liked, reputable and often recommended. Norton for example can protect against zero day ransomware thanks to their cloud rep via SONAR alone

    The whole "All AVs use signatures but we don't so just download us now because we look legit" cards don't really work in .. almost 2018 now
     
  7. HarborFront

    HarborFront Level 33
    Content Creator

    Oct 9, 2016
    2,295
    5,748
    Far East
    Anybody doing video test on this? :)
     
  8. HarborFront

    HarborFront Level 33
    Content Creator

    Oct 9, 2016
    2,295
    5,748
    Far East
  9. Opcode

    Opcode Level 18
    Content Creator

    Aug 17, 2017
    890
    6,285
    Caille
    Windows 10
    Looks like they can't look up to their claim after all...

    Source: Free Home Personal – Cybersight

    *unless the attack method is MBR like with Petya, NotPetya, BadRabbit or Rombertik.
     
Loading...
Similar Threads Forum Date
Video Review RansomStopper by CyberSight Video Reviews Dec 8, 2017