App Review Malware beats Microsoft Defender: How you get hacked (TPSC)

[Lymphocyte]

Content source

https://youtu.be/nUFgBhBBB-E

 

[oldschool]

Wonder how many AVs would detect password protected files. This is really a phishing scam and user-behavior is the real issue. I've gotten a few of these recently myself.

 

[oldschool]

Here's one that just came in my inbox. They've sent the same one a number of times.
Nice!

 

[Jonny Quest]

Wonder how many AVs would detect password protected files. This is really a phishing scam and user-behavior is the real issue. I've gotten a few of these recently myself.

Winner..."the user-behavior is the real issue". Yes, where is the part where the user A) says, "I've never used them or had that (software etc) before", and marks it, deletes it as Spam. B) hovers their mouse cursor over the sender's address to confirm the suspicious address that they (user) has never been a part of before. Let alone entering a password into the pop-up box...at what point do the alarm bells start going off?

 

[Xeno1234]

Wonder how many AVs would detect password protected files. This is really a phishing scam and user-behavior is the real issue. I've gotten a few of these recently myself.

Kaspersky. They have options to scan within password protected archives if you provide the password.

Also, if you put in the password and run it, can’t it be detected since it’s not encrypted?

 

[oldschool]

Winner..."the user-behavior is the real issue". Yes, where is the part where the user A) says, "I've never used them or had that (software etc) before", and marks it, deletes it as Spam. B) hovers their mouse cursor over the sender's address to confirm the suspicious address that they (user) has never been a part of before. Let alone entering a password into the pop-up box...at what point do the alarm bells start going off?

I love where it says "It will take you only a minute to receive this fantastic prize." Absolutely priceless!

 

[monkeylove]

The video refers to reputation detection.

 

[Jonny Quest]

Agree, but it still goes to show no protection is bulletproof, and that ultimately the user is, can be, the bottom line of defense regarding their onboard and online security.

 

[Ink]

A safety crash barrier can destroy a vehicle.

 

[Sandbox Breaker - DFIR]

Why would an untrusted binary even be allowed to run. Encrypted or not. This should never run. At least not at my customers hahahah

This is the problem with default allow.

 

[monkeylove]

"It's your fault."