Qihoo 360 intercepts the First Zero-day Vulnerability After XP Stops Updating

Status
Not open for further replies.

Terry Ganzi

Level 26
Thread author
Verified
Top Poster
Well-known
Feb 7, 2014
1,540
Microsoft confirmed on April 27th that all versions of IE browsers have a zero-day vulnerability that hackers can exploit to remotely attack users’ computers and delete or steal users’ data. Due to Microsoft’s ending to support XP from April 8th, XP users will not get the updating patch and are facing a serious security risk. In response, Qihoo 360 is first to claim that 360 XP Shield can intercept attacks exploiting this vulnerability.

It is understood that zero-day vulnerabilities, also known as zero-day attacks, are those vulnerabilities immediately exploited after being found. Such attacks are often very sudden and devastating. Microsoft said that hackers could exploit the vulnerability to attack and completely control users’ computers to remotely delete data, install malicious software and create a full access account at any time. Microsoft is developing an emergency patch to the vulnerability, but XP users cannot get the update. Information security experts estimated that 15-25% of PCs worldwide still run Windows XP system.

After Microsoft ended support to XP, the protection task was handed over to the third-party security companies. This massive vulnerability is testing the protecting ability of third-party security software. COSEINC, a well-known Asian security agency, lately issued a testing report on the effectiveness of Windows XP security protection, showing that the average rate of eight security software to intercept attacks exploiting XP vulnerabilities was 63.3% and 360 Safe Guard is the only one to 100% block all exploits.


Figure: 360 Safe Guard ranked No.1 in COSEINC’s XP protection evaluation

Up to now, Qihoo 360 is the first security company in China to confirm the ability to defend against this vulnerability.

t0158529cba8999a4ec.png
 

Littlebits

Retired Staff
May 3, 2011
3,893
It makes me wonder how much longer will it be before Qihoo and Baidu get caught or accused of doing the same thing that Rising did.
For those who don't remember, Rising created malware and distributed it to the wild to increase their detection rate.
Once they got busted they soon discontinued the global products and only offer free Chinese versions.
I believe other AV vendors have also did the same but just was wise enough to not get caught.

Thanks. :D
 

trainbus120

Level 10
Verified
Sep 12, 2013
454
For me, its hard to believe.... why would a co who's detection rate is so high as stated above, will offer all its product range for FREE...... fishy!!! As far as I know, its not a charitable organization o_O
 

cruelsister

Level 42
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 13, 2013
3,151
Train- Although Qihoo started out as just a company making Security Software, they have since morphed their business model. They have branched out into Internet Search (from which they gain advertising dollars), gaming (as of last quarter they had ~700K accounts); they maintain corporate security accounts in China.

From basically nothing in 2011, their current piece of the search market pie in China is now 25% (all at the expense of Baidu); they also have about a 70% market share in mobile as well as 70% share of the browser market. This had led to the market capitalization of Qihoo exceeding 11 billion USD (of which a bit over 1 billion is in cash). Current gross profit was a bit below 600 million USD and grows about 120% year over year.

And all of this occurred because of what can be considered an excellent anti-malware product which they use as a "loss-leader" to propel their growth in other areas (Also, the Baidu AV product was developed just recently in reaction to the growth of Qihoo). So really not fishy at all; just very, very smart.
 

nissimezra

Level 25
Verified
Apr 3, 2014
1,460
it started from MSE the first normal free AV at the time it launch.
and now we have qhioo, avast.......
i dont believe that any private user will buy AV, that's pretty much the beginning of the end of paid AV
 
  • Like
Reactions: Venustus
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top