Reply to thread

Message

<blockquote data-quote="Shadowra" data-source="post: 996590" data-attributes="member: 92939">Chill guys <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin&nbsp; &nbsp; :D" loading="lazy" data-shortname=":D" />Personally I like [USER=32260]@Andy Ful[/USER] , because his tools are already quite good and his safety tips help a lot.I also like [USER=91446]@Anthony Qian[/USER]&nbsp; (even if we shouted at each other when I was new here, with McAfee ^^ ) who follows Magniber closely and we discuss a lot in PM (thanks to you for the samples during my vacations, so I can play on VM too ^^ )Concerning Microsoft Defender, I already managed to encrypt a VM with Magniber in MSI with the anti-ransomware.I don&#039;t know what BAFS is, so I won&#039;t go into it.Even if Kaspersky and ESET are the 2 AVs I see the most on VT (you can also put Comodo, but Sandbox), the other AVs are slow to block it. I&#039;ve already seen editors add it, but only in files... just change some parts of the malware or re-build it to bypass detection...I think Magniber will be detected sooner or later, like any Ransomware (we remember the Locky wave in 2016, or GandCrab in 2017/2018) . It&#039;s enough that the editors will have found a strategy that lasts on the long term. Either in Remediation, or in AI Machine Learning with a clean detection.</blockquote>

[QUOTE="Shadowra, post: 996590, member: 92939"] Chill guys :D Personally I like [USER=32260]@Andy Ful[/USER] , because his tools are already quite good and his safety tips help a lot. I also like [USER=91446]@Anthony Qian[/USER] (even if we shouted at each other when I was new here, with McAfee ^^ ) who follows Magniber closely and we discuss a lot in PM (thanks to you for the samples during my vacations, so I can play on VM too ^^ ) Concerning Microsoft Defender, I already managed to encrypt a VM with Magniber in MSI with the anti-ransomware. I don't know what BAFS is, so I won't go into it. Even if Kaspersky and ESET are the 2 AVs I see the most on VT (you can also put Comodo, but Sandbox), the other AVs are slow to block it. I've already seen editors add it, but only in files... just change some parts of the malware or re-build it to bypass detection... I think Magniber will be detected sooner or later, like any Ransomware (we remember the Locky wave in 2016, or GandCrab in 2017/2018) . It's enough that the editors will have found a strategy that lasts on the long term. Either in Remediation, or in AI Machine Learning with a clean detection. [/QUOTE]

Verification