MRG Effitas Online Banking Certification Q4 2016

[Solarquest]

19 Applications Tested

78 In-the-Wild Financial malware samples used

2 Live Botnets

2 Simulated Attacks

 

[Winter Soldier]

They do not use zero day samples in this test.

But some financial malware as Zbot, Nymaim, Shiotob, Gozi, Neurevt and their variants, use multi-flow attacks fragmented on multiple streams of information, with the purpose of confusing the sandboxing tools that perform object's analysis individually. These items will be labeled as harmless, because they are just part of the game.
Otherwise the attack is perpetrated with a logic that integrates components injected on multiple vectors (web, mail, files) of the attack surfaces with the purpose of hiding the activities to security solutions.

By seeing the online banking test, they seem pretty optimistic.

 

[509322]

They do not use zero day samples in this test.

But some financial malware as Zbot, Nymaim, Shiotob, Gozi, Neurevt and their variants, use multi-flow attacks fragmented on multiple streams of information, with the purpose of confusing the sandboxing tools that perform object's analysis individually. These items will be labeled as harmless, because they are just part of the game.
Otherwise the attack is perpetrated with a logic that integrates components injected on multiple vectors (web, mail, files) of the attack surfaces with the purpose of hiding the activities to security solutions.

By seeing the online banking test, they seem pretty optimistic.

It's a general test using the same testing format that MRG Effitas has been utilizing over the past years - and not a comprehensive one. It's definitely not a full pen-test of banking protections. See the recent AVLab test for supplemental infos.