Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 902677" data-attributes="member: 32260">There is one popular vector of attack not covered by &quot;Safe email account&quot;, e.g. USB drives.But, this vector is not so dangerous, because finding the 0-day malware on the friend&#039;s USB drive is much less probable than via email spam. First, the malware can be detected by the AV on the friend&#039;s machine. Second, the friend has to decide to share it with you. Third, the sharing is not an immediate event - let&#039;s say it will be one-day-delay.Of course, the responsible user can always use the friend&#039;s USB drive from &quot;Safe email account&quot;. There is also a way to allow USB drives only from &quot;Safe email account&quot;, but this would require tweaking the registry and would be acceptable only for children.Anyway, the ConfigureDefender HIGH settings include the ASR rule that blocks the execution of unsafe executables (but not scripts) from USB drives, which can be additional protection.</blockquote>

[QUOTE="Andy Ful, post: 902677, member: 32260"] There is one popular vector of attack not covered by "Safe email account", e.g. USB drives. But, this vector is not so dangerous, because finding the 0-day malware on the friend's USB drive is much less probable than via email spam. First, the malware can be detected by the AV on the friend's machine. Second, the friend has to decide to share it with you. Third, the sharing is not an immediate event - let's say it will be one-day-delay. Of course, the responsible user can always use the friend's USB drive from "Safe email account". There is also a way to allow USB drives only from "Safe email account", but this would require tweaking the registry and would be acceptable only for children. Anyway, the ConfigureDefender HIGH settings include the ASR rule that blocks the execution of unsafe executables (but not scripts) from USB drives, which can be additional protection. [/QUOTE]

Verification