Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 977608" data-attributes="member: 32260">Updated the OP in the SWH thread. Added links to all attack examples. Added also the shortest description of SWH:The more sophisticated attack, the fewer chances that AV can detect it, but the greater chances that SWH can prevent it.This description is very true. When the attackers try to avoid AV detection, they start using sophisticated scripting methods and long infection chains. But, this is in clear advantage to SWH.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />On the contrary, when the attacker uses a simple attack via the URL with EXE or MSI file, the SWH does nothing and relies on AV protection + SmartScreen.</blockquote>

[QUOTE="Andy Ful, post: 977608, member: 32260"] Updated the OP in the SWH thread. Added links to all attack examples. Added also the shortest description of SWH: [B][COLOR=rgb(184, 49, 47)]The more sophisticated attack, the fewer chances that AV can detect it, but the greater chances that SWH can prevent it.[/COLOR][/B] This description is very true. When the attackers try to avoid AV detection, they start using sophisticated scripting methods and long infection chains. But, this is in clear advantage to SWH.:) On the contrary, when the attacker uses a simple attack via the URL with EXE or MSI file, the SWH does nothing and relies on AV protection + SmartScreen. [/QUOTE]

Verification