Reply to thread

Message

<blockquote data-quote="Adrian Ścibor" data-source="post: 972738" data-attributes="member: 71496">The question should be - why you shouldn&#039;t use a non-popular protocol to start attack, insteed know-well HTTP/S by everybody? Imagine a SMB protocol and vulnerability to propagate a huge ransomware attack in 2017 (NotPetya). Why you cannot use diferent attack method than usual? To check protection when it comes to HTTP protocol you can visit our Advanced In The Wild Malware Test on webiste: avlab[.]pl/en/Therefore we want to try different protocol than HTTP/S to check vendor&#039;s protection, their reaction on simulate a running malware and delivered to the system in another way.No, we have used a FTP client to drop malware to the system first. Next, if it wasn&#039;t blocked the samples was executed to check for example keylogging protection (system-wide and browser-based) or protection against stealing passwords from files that stored on disk.Dear Readers! If you have another questions to change methodology or add another ways to try bypass protection, you can write here. Next edition of internet banking we can take this into consideration.</blockquote>

[QUOTE="Adrian Ścibor, post: 972738, member: 71496"] The question should be - why you shouldn't use a non-popular protocol to start attack, insteed know-well HTTP/S by everybody? Imagine a SMB protocol and vulnerability to propagate a huge ransomware attack in 2017 (NotPetya). Why you cannot use diferent attack method than usual? To check protection when it comes to HTTP protocol you can visit our Advanced In The Wild Malware Test on webiste: avlab[.]pl/en/ Therefore we want to try different protocol than HTTP/S to check vendor's protection, their reaction on simulate a running malware and delivered to the system in another way. No, we have used a FTP client to drop malware to the system first. Next, if it wasn't blocked the samples was executed to check for example keylogging protection (system-wide and browser-based) or protection against stealing passwords from files that stored on disk. Dear Readers! If you have another questions to change methodology or add another ways to try bypass protection, you can write here. Next edition of internet banking we can take this into consideration. [/QUOTE]

Verification