App Review Malwarebytes Vs Ransomware 2022

[CyberPanther]

Content source

https://youtu.be/cJh4Isc_1LA

Hello MT members,
I would like to share with you the latest video of testing Malwarebytes against ransomware.

 

[dinosaur07]

And the result is? I'm too lazy to watch it.

 

[Anthony Qian]

And the result is? I'm too lazy to watch it.

Leo tested 100 very old ransomware samples and MB successfully blocked all of them.

Then he disabled signature based detection and ran two ransomware samples. MB blocked the first one but missed the second one.

Finally he tested MB’s exploit protection with ransomware simulation scripts. MB blocked early stages of attack but missed encryption stage.

 

[dinosaur07]

It still remains a second layer of protection as always. Thanks for the summary @Anthony Qian

 

[lvseqiji]

Malwarebytes does not put BB into their Home version, but they claim that their enterprise version has one. Strange desicion.

 

[Nightwalker]

Malwarebytes does not put BB into their Home version, but they claim that their enterprise version has one. Strange desicion.

This is not true, the enterprise version (endpoint) is actually the home version (premium) plus some specific remediation, telemetry and management modules; the behavior blocker is the same.

Directly from Pedro Bustamante, head of research and innovation at Malwarebytes:

Hi, was pointed to this post. Pedro Bustamante here, head of research and innovation at malwarebytes... excuse the old Panda icon

I can confirm both the MB4core and corporate EP core detection is exactly the same. We do have a separate EDR business product that includes a few more cloud-based detection technologies, but that was not tested at MRG. The bad performance rating was a config error on our part as we provisioned EDR instead of EP (even though the EDR detections don't count for points in the MRG test). In the next test you'll see the real performance impact comparative.

In terms of participating and focusing on 3rd party tests, we made the decision about a year ago to focus on improving in these tests. The launch of Katana by incorporating a few more static (sig and heuristic) and dynamic (runtime sandbox) engine layers has helped bridge the historic gap. During the process we found and fixed bugs as well as created new protection and detection capabilities for existing engine layers, so the exercise to adapt to testing was valuable. We signed up for AV-Comparatives (for both MB4 and Malwarebytes EP) and also AV-Test business tests. You will start seeing Malwarebytes for the first time ever in these tests soon.

Source:

MRG Effitas - MRG Effitas 360 Degree Assessment & Certification Q4 2020

Could you give us the source of the above information? I still doubt that these features are fully implemented. I also noticed that the Nebula Console has the ability to change the Malwarebytes Policies and can load several profiles. Although one test means nothing, the Malwarebytes Endpoint...

malwaretips.com

Ps: The behavior blocker of Malwarebytes is a combination of the Anti-exploit + Anti-Ransomware modules along with some machine learning, but I wont put it in the same league of Kaspersky's System Watcher, Bitdefender BB or F-Secure Deepguard.

 

[lvseqiji]

This is not true, the enterprise version (endpoint) is actually the home version (premium) plus some specific remediation, telemetry and management modules; the behavior blocker is the same.

Directly from Pedro Bustamante, head of research and innovation at Malwarebytes:



Source:

MRG Effitas - MRG Effitas 360 Degree Assessment & Certification Q4 2020

Could you give us the source of the above information? I still doubt that these features are fully implemented. I also noticed that the Nebula Console has the ability to change the Malwarebytes Policies and can load several profiles. Although one test means nothing, the Malwarebytes Endpoint...

malwaretips.com

Ok. Thanks for the info. But I didn't see it in action. I have only seen their anti-exploit module (which is some kind of BB I guess? )reacts to Malware samples.

 

[Nightwalker]

Ok. Thanks for the info. But I didn't see it in action. I have only seen their anti-exploit module (which is some kind of BB I guess? )reacts to Malware samples.

I edited my post including this info about the BB, it is a combination of the Anti-exploit + Anti-Ransomware modules, it does work, but in my opinion it isnt that versatile or strong compared to Kaspersky's System Watcher or Emsisoft BB for example.

 

[Kiss]

It remains a second tier security tool, I would not trust using it alone on the system