- Feb 4, 2016
- 2,520
..... and few quotes from the article above:
Malware authors are trolling security researchers on VirusTotal by posting abusing comments, marking their websites as dangerous sites, and voting recently discovered malicious files as "harmless."
The targets of these actions are members of MalwareHunterTeam (MHT), a group of security researchers who hunt down malware as a hobby.
MHT's activity, while helpful for the rest of us, has ruined countless of malware distribution campaigns, which MalwareHunterTeam researchers have uncovered and shared among their peers.
The place where they find, identify and catalog malicious files and malware campaigns is VirusTotal, a service that allows users to scan files and URLs for malicious content.
Unknown to most users is that VirusTotal stores suspicious files for later analysis. This is where MalwareHunterTeam and other security firms come in. They search the VirusTotal database for suspicious files, analyze the payload, and report on it.
While most companies add the newly discovered files to their virus databases, the members of the MalwareHunterTeam publish the bulk of their researcher on Twitter.
This has attracted a lot of attention, both good on bad. The good comes from the pro-bono nature of their work. The bad comes from the big bullseye they've painted on their backs.
Google, the company that owns VirusTotal, has already banned the accounts posting abusive comments, and many more, according to JamesWT, one of the MalwareHunterTeam members who's faced the brunt of their attacks.
Despite Google's actions, the security researcher expects crooks to sign up for new accounts and continue their vexatious behavior. Nevertheless, the company hasn't yet moved in to ban the accounts that have consistently voted malicious files as harmless, and vice versa, in spite of the overwhelming evidence.
These actions, which remind us of lame high-school pranks, are just the latest means through which malware authors lash out at security researchers for exposing their activities and will most likely continue as long as security researchers keep fighting the good fight.