App Review DoubleAgent Zero-Day Attacking Comodo Antivirus

[Captain Awesome]

 

[Fel Grossi]

This "attack" will be fixed in tomorrow's update, according to COMODO engineer.

 

[Faybert]

I never took Comodo seriously, your firewall may be as good as they say, although I find the Windows firewall enough, but the rest of your products are useless, in my opinion.

 

[Deleted member 178]

This attack is so weak that only "happy clickers" will ever be affected by it. This is an attempt by this fake company to promote themselves on the back of other vendors.

 

[Handsome Recluse]

I never took Comodo seriously, your firewall may be as good as they say, although I find the Windows firewall enough, but the rest of your products are useless, in my opinion.

Could be a difference in strategy.

 

[enaph]

Please do not call it zero-day attack.
KernelMode.info • View topic - Cybellum - another pseudo security company from Israel

 

[ctrlz]

I found this on SecureBox (I think it's a Comodo blog):

Comodo, the global leader in cyber security solutions responded to Cybellum’s listing of vulnerable antivirus solutions and stated that Comodo’s Internet Security (CIS) was not vulnerable due to the unique manner in which its layered defense worked.

Ref: Zero-Day Attack DoubleAgent Turns Antivirus Into Malware

So, was CIS bypassed or not? The video shows that the DLL was loaded.

 

[Handsome Recluse]

I found this on SecureBox (I think it's a Comodo blog):

Ref: Zero-Day Attack DoubleAgent Turns Antivirus Into Malware

So, was CIS bypassed or not? The video shows that the DLL was loaded.

Eh. I don't know but they also said the bad defaults of CIS were the reason for the bypass.

 

[cruelsister]

You need not go through such convoluted procedures to get past Comodo when used at default as I've said for quite a while (and God alone knows what settings these Churls used as it is not shown). But at my settings:

1). This "malware" needs Privilege escalation (specifically to screw with Verifierdlls) which would be blocked.
2). and it also needs to download the payload, also which would be blocked.

Finally this thingy has been termed horrible because it bypasses "all AV's". Guess these guys have never seen FUD malware which are a dime a dozen. So once again we have a case of shameless self-promotion that was just lapped up by the lay press.

 

[Arequire]

But guys... you have to buy their product because they're the only company that can guarantee ABSOLUTE PREVENTION and NO FALSE POSITIVES.

 

[cruelsister]

So does that mean that they are superior to the product by Helig Defense which is


"The World's Most Advanced Anti-Ransomware Solution"?

 

[Arequire]

So does that mean that they are superior to the product by Helig Defense which is


"The World's Most Advanced Anti-Ransomware Solution"?

No no, CS you've got it all wrong. RansomFree is the most advanced anti-ransomware solution because it's developed by a team of elite, former military cyber-security experts.

 

[Captain Awesome]

So does that mean that they are superior to the product by Helig Defense which is


"The World's Most Advanced Anti-Ransomware Solution"?

Looking forward to see your review of ransomoff.@cruelsister

 

[cruelsister]

Your Wish is my Command.

 

[Deleted member 178]

No products can be better than this :

The new Revolutionnary Security Solution

 

[Arequire]

No products can be better than this :

The new Revolutionnary Security Solution

I see that Umbrella logo in the corner. I ain't opening that box.

 

[Deleted member 178]

I see that Umbrella logo in the corner. I ain't opening that box.

Don't be scared, Umbra Corporation has successfully bought Umbrella , and we have cleaned any traces of the Red Queen and the T-Virus

 

[HeiDef]

No no, CS you've got it all wrong. RansomFree is the most advanced anti-ransomware solution because it's developed by a team of elite, former military cyber-security experts.

We don't say elite anywhere on our site. We aren't that shameless

 

[Av Gurus]

We don't say elite anywhere on our site. We aren't that shameless

I think he mean about other program Cybereason RansomFree

 

[Ana_Filiz]

No products can be better than this :

The new Revolutionnary Security Solution

It i$ true that you didn`t want to participate with this product in the AV-Comparatives test? They said the developers refused to be ridiculised by Panda in the Real-World Protection tests.