Hot Take [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

[Evjl's Rain]

Comparison between browser extensions

Test 29/12
Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

Test 24/11
Q&A - [Updated 24/11/2018] Browser extension comparison: Malwares and Phishings

Test 12/11
Q&A - [Updated 12/11/2018] Browser extension comparison: Malwares and Phishings

Test 7/11
Q&A - [Updated 7/11/2018] Browser extension comparison: Malwares and Phishings

Test 6/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 3/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 2/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Test, quick 1/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Fun test 25/7/2018
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 24/7/2018 (most comprehensive, as possible)
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 19/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 18/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 10/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 7/6/2018
Q&A - [Updated 7/6/2018] Browser extension comparison: Malwares and Phishings

Updated 3/6/2018
Q&A - [Updated 3/6/18] Browser extension comparison: Malwares and Phishings

Updated 25/4/2018
Poll - [Updated 25/4/18] Browser extension comparison: Malwares and Phishings

Update: 23/3/2018
Poll - [Updated 23/3/18] Browser extension comparison: Malwares and Phishings


Browser: Google Chrome 65 x64
Malware and phishing links: 10 malc0de, 10 vxvault, 10 openphish, 10 verified phishtank, 10 unverified phishtank
Total: 50 links

Spoiler: Links

Dropbox - link test 17-3-2018.txt

Extensions: recently downloaded from Chrome Web Store
- Google Safe Browsing (built-in chrome's protection)
- AdGuard AdBlocker: default settings, uses Google Safe Browsing (delayed) and their own database
- Avira browser safety: default settings
- Norton Safe Web: default settings
- Bitdefender Trafficlight: default settings, it rarely blocks any malware links, just old ones
- Avast Online Security: default settings, only has phishing protection, expected to score 0 against malwares
- Netcraft Extension: default settings, only has phishing protection, expected to score 0 against malwares
- uBlock Origin with some additional filters

Spoiler: ublock origin filters

http://hosts-file.net/emd.txt
http://hosts-file.net/exp.txt
http://hosts-file.net/pup.txt
http://hosts-file.net/psh.txt
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_URLBL.txt

NOTE: the result can vary from day-to-day. Tomorrow with different links, the result can be very different. All are live links but they can be dead a few minutes after the test. No duplication

Results:

Winner: Google Safe Browsing

 

[SHvFl]

Thanks for the update. My knowledge on this topic is from another century.

Dns filtering has its use but for a home user it should be the last option.

 

[Andy Ful]

they don't, however, they can block third-party domains that host ads.dns filtering is useless cuz it gets bypass if you want to use a VPN or proxy.
I don't understand the logic behind Pin-hole and similar services like AdGuard Home

You do not understand it, because VPN is important to you. That is normal.
Yet, many people do not use any VPN, because they do not need it in the home environment (but that can depend on the country). Furthermore, VPNs can introduce some vulnerabilities, too.
DNS filtering does not introduce additional vulnerabilities and can improve users' security.

 

[Arequire]

Yes but u can install Ublock -AdGard on every machine.DNS filtering is only useful for IoT deviceS.

You could, but uBlock's limited to browsers so desktop/mobile applications are still free to display ads. AdGuard's an option but a lifetime subscription for 4 PC/Mac + 4 Android is over $300 while building a Pi-Hole is around $40 or less if you spring for a cheaper Pi model.

If you live in a household with a lot of devices then slapping a Pi-Hole/AdGuard Home on your network is so much easier than dealing with devices individually, especially if you have no right to interfere with devices that don't belong to you (family, roommates, etc.).

 

[Windows_Security]

They don't hence why i said it doesn't have the ability to filter at the same degree and quality as normal extension or whatever filtering.

Thx, I had missed that

 

[Andy Ful]

Dns filtering has its use but for a home user it should be the last option.

DNS filtering has an advantage to add some protection against the malware by blocking the connection with the malicious URLs (outside the web browser). If the chosen DNS works well (no Internet speed degradation) then why not use it.
Personally, I use Edge (SmartScreen) + AdGuard DNS (no application, just DNS) + WD Network Protection (part of WD ASR). Such setup, does not introduce new vulnerabilities, does not degrade the web browser performance, and is probably as safe as other solutions.

 

[SHvFl]

DNS filtering has an advantage to add some protection against the malware by blocking the connection with the malicious URLs (outside the web browser). If the chosen DNS works well (no Internet speed degradation) then why not use it.
Personally, I use Edge (SmartScreen) + AdGuard DNS (no application, just DNS) + WD Network Protection (part of WD ASR). Such setup, does not introduce new vulnerabilities, does not degrade the web browser performance, and is probably as safe as other solutions.

Correct, as long as adguard dns is as fast as other dns for you and you are happy from the filtering quality it's a good option.

 

[Flak]

I skimmed this thread, or at least the last couple of pages. What would the recommendation be for browser and browser extensions for adblocking and general protection (pup/phising/malware) for family members and those less savy? With the caveat that UBlock in its default setup causes too much trouble and too many calls to me.

 

[Arequire]

With the caveat that UBlock in its default setup causes too much trouble and too many calls to me.

Very easy blocking mode might solve this problem:
gorhill/uBlock

 

[Nightwalker]

I skimmed this thread, or at least the last couple of pages. What would the recommendation be for browser and browser extensions for adblocking and general protection (pup/phising/malware) for family members and those less savy? With the caveat that UBlock in its default setup causes too much trouble and too many calls to me.

Try AdGuard extension.

 

[Windows_Security]

I skimmed this thread, or at least the last couple of pages. What would the recommendation be for browser and browser extensions for adblocking and general protection (pup/phising/malware) for family members and those less savy? With the caveat that UBlock in its default setup causes too much trouble and too many calls to me.

For family, I always keep on the safe browsing feature of the browser. Some combined Ad & Malware links blockers use filter lists which trigger some websites (at least in Holland e.g. nu.nl) to not show video's or even blocking content with a transparent overlay pop-up.

So it is not about the best in terms of performance and protection but it comes more to less hassle (no calls) with some protection. Best options are:
1. Malware Bytes Browser extension, does well in the tests of Evjl's Rain and in a recent test of a testing organiation. Blocks most malware links and does an above average Ad & tracking protection.

2. Avast Browsing protecton extension, did not do so well in Evjl's Rain malware tests, but did reasonably well in the test of the testing organization. Does OK in phishing tests of EVjl's Rain (better than MalwareBytes).. Its ad & tracking protection is similar to Disconnect (check configuration of Avast to enable blocking by default). I know Avast never gave problems, (at least never called by relatives having problems). I add it to Chorme for years on PC's of relatives.

Advantage of above two is that they combined Phishing-Malware & Ad-tracker blocking, but are not breaking website functionality or triggering anti-ad block wall's.

I like MalwareBytes extension a little better. I have it on my wife's 2-in-1 laptop. Only once it did block something it should not (a website of EasyJet to claim expenses due to cancelled flights). Therefor I have not added MalwareBytes extension to PC's of family members.

Suggest you try them both

 

[Flak]

Malwarebytes seems to cause slowness, depending on the site it's more or less noticeable. It also sometimes gives download or site warning for sites and downloads that are most definitely safe. Which causes calls.

Right now I'm playing with AdGuard + EBS + Netcraft.

 

[legendcampos]

I skimmed this thread, or at least the last couple of pages. What would the recommendation be for browser and browser extensions for adblocking and general protection (pup/phising/malware) for family members and those less savy? With the caveat that UBlock in its default setup causes too much trouble and too many calls to me.

Avira Browser Safety If I'm not mistaken has the same engine as Adguard

 

[tsunami]

Avira Browser Safety If I'm not mistaken has the same engine as Adguard

Partners | AdGuard

"Avira is a popular antivirus and security software developer that offers a series of products to block malware, anonymize your traffic, protect your mobile devices etc.
As a part of partnership with AdGuard, Avira has added the ad blocking feature based on our technology and filters to their browser extensions."

 

[Moonhorse]

Netcraft been updated today 15h january

What's new in version 1.13.0?
• URLs can now be directly reported from within the extension
• Site data now refreshes if the current page redirects
• Styling updates to the options and blocked pages

 

[HarborFront]

Edited entire post. Sorry

OK ran some phishing tests with links from phishtank and openphish sites

Malwarebytes is blocking quite a number of them
Squidblacklist filter in UBO do block some
Netcraft also blocking many of them

 

[Burrito]

Netcraft been updated today 15h january

What's new in version 1.13.0?
• URLs can now be directly reported from within the extension
• Site data now refreshes if the current page redirects
• Styling updates to the options and blocked pages

Thanks Moonhorse.

Make sure you open Netcraft, and go to options. The 3 options were turned off on my system.

 

[Freki123]

. AdGuard's an option but a lifetime subscription for 4 PC/Mac + 4 Android is over $300 while building a Pi-Hole is around $40 or less if you spring for a cheaper Pi model.

For those who want to buy a lifetimelicense maybe take a look at Block Ads to Optimize Your Internet Experience & Protect Your Devices From Malware . They have a 2pc+2android for 29.99$ atleast thats how i understand it.

 

[Evjl's Rain]

I think this filter (for ublock and ublock's folks, only) is worth adding
https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter.txt

 

[HarborFront]

I think this filter (for ublock only) is worth adding
https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter.txt

So what does it do that other filters can't?

 

[Evjl's Rain]

So what does it do that other filters can't?

it is a list of the latest malwares from urlhaus. Someone created this filter and updates it 2 times a day => this can be a problem but still worth adding
this is a source that I use to test extensions where many of the tested extensions miss