This seems to be a huge security flaw in Edge and MS Defender.

annaegorov

annaegorov

Level 10
Thread author
Well-known
Forum Veteran
Feb 6, 2018
476
1,378
866
USA
If you go to this site and click on phishing, follow the prompt on that page.

www.amtso.org

AMTSO Security Features Check Tools - AMTSO

Is your security software running correctly? The AMTSO Security Features Check (SFC) tools verify that your security solution is properly configured and operating as expected.
www.amtso.org www.amtso.org

You should not be able to see the page, it should be blocked.

BUT Edge does not block it, neither does defender, Bitdefender does... Why is this allowed?
 
  • Like
Reactions: Dave Russo
I have not tested any thing else except the above, oh and Comodo also allows the page to be visible, even with tight settings. Edge and Defender same.
 
  • Like
Reactions: Dave Russo
Edge and MS Defender do not block the AMTSO phishing test because the test is not considered to be a legitimate threat. I don't believe they block the EICAR malicious web page test either, for the same reason. Bitdefender AV's and the Malwarebytes Browser Guard extension will block all of the AMTSO tests though. I don't know if Avast or AVG blocks them.

C.H.
 
  • Like
  • +Reputation
  • Applause
Reactions: Dave Russo, lokamoka820 and Parkinsond
1783983562471.png
1783983621101.png

Not blocked with either Edge nor Brave, with MD
 
  • Like
Reactions: Dave Russo and lokamoka820
Captain Holly said:
Edge and MS Defender do not block the AMTSO phishing test because the test is not considered to be a legitimate threat. I don't believe they block the EICAR malicious web page test either, for the same reason. Bitdefender AV's and the Malwarebytes Browser Guard extension will block all of the AMTSO tests though. I don't know if Avast or AVG blocks them.

C.H.
Click to expand...
Was blocked only by McAfee web adivsor and Symantec browser protection extensions.
 
  • Like
Reactions: lokamoka820

You may also like...