Hot Take [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

[Evjl's Rain]

Comparison between browser extensions

Test 29/12
Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

Test 24/11
Q&A - [Updated 24/11/2018] Browser extension comparison: Malwares and Phishings

Test 12/11
Q&A - [Updated 12/11/2018] Browser extension comparison: Malwares and Phishings

Test 7/11
Q&A - [Updated 7/11/2018] Browser extension comparison: Malwares and Phishings

Test 6/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 3/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 2/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Test, quick 1/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Fun test 25/7/2018
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 24/7/2018 (most comprehensive, as possible)
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 19/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 18/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 10/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 7/6/2018
Q&A - [Updated 7/6/2018] Browser extension comparison: Malwares and Phishings

Updated 3/6/2018
Q&A - [Updated 3/6/18] Browser extension comparison: Malwares and Phishings

Updated 25/4/2018
Poll - [Updated 25/4/18] Browser extension comparison: Malwares and Phishings

Update: 23/3/2018
Poll - [Updated 23/3/18] Browser extension comparison: Malwares and Phishings


Browser: Google Chrome 65 x64
Malware and phishing links: 10 malc0de, 10 vxvault, 10 openphish, 10 verified phishtank, 10 unverified phishtank
Total: 50 links

Spoiler: Links

Dropbox - link test 17-3-2018.txt

Extensions: recently downloaded from Chrome Web Store
- Google Safe Browsing (built-in chrome's protection)
- AdGuard AdBlocker: default settings, uses Google Safe Browsing (delayed) and their own database
- Avira browser safety: default settings
- Norton Safe Web: default settings
- Bitdefender Trafficlight: default settings, it rarely blocks any malware links, just old ones
- Avast Online Security: default settings, only has phishing protection, expected to score 0 against malwares
- Netcraft Extension: default settings, only has phishing protection, expected to score 0 against malwares
- uBlock Origin with some additional filters

Spoiler: ublock origin filters

http://hosts-file.net/emd.txt
http://hosts-file.net/exp.txt
http://hosts-file.net/pup.txt
http://hosts-file.net/psh.txt
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_URLBL.txt

NOTE: the result can vary from day-to-day. Tomorrow with different links, the result can be very different. All are live links but they can be dead a few minutes after the test. No duplication

Results:

Winner: Google Safe Browsing

 

[Moonhorse]

I personally have a pretty similar setup as @Back3
I don't see a reason to really use an extension just for blocking malicious sites as NextDNS + uBlock Origin's (Maware domains blocklists) + Browser's integrated Google Safe Browsing and maybe even your AV that uses HTTPS-Scanning are definitely enough protection and don't require you to install another extension that has access to your browsing data and that might even increase attack-surface.

@goodjohnjr how about you create a Security Config thread so that people can give some more recommendations?

You can create it here:

PC Setup Configuration Help & Showcase

Share your PC security set-up with the community.

malwaretips.com

This is true and av dependant, so posting his config is much appreciated, nowadays ublock origin + happy clicker joe its hard to get infected than it used to be

Phishing is the only problem people could fall on, and i guess netcraft atleast is on next level compared to some of the antiviruses

 

[Kongo]

This is true and av dependant, so posting his config is much appreciated, nowadays ublock origin + happy clicker joe its hard to get infected than it used to be

Phishing is the only problem people could fall on, and i guess netcraft atleast is on next level compared to some of the antiviruses

True, the blocking of phishing sites is also not really the strenght of NextDNS. The blocking of Newly Registered Domains within NextDNS is quite effective against phishing tho and should definitely be enabled. I barely ever needed an extension like Netcraft and therefore never used it, but as it has set it's focus mainly on phishing it might be worth considering.

 

[Back3]

Thank you for sharing that, do you use the free version of NextDNS?

Yeah! I also use it for my Apple devices.

 

[goodjohnjr]

I personally have a pretty similar setup as @Back3
I don't see a reason to really use an extension just for blocking malicious sites as NextDNS + uBlock Origin's (Maware domains blocklists) + Browser's integrated Google Safe Browsing and maybe even your AV that uses HTTPS-Scanning are definitely enough protection and don't require you to install another extension that has access to your browsing data and that might even increase attack-surface.

@goodjohnjr how about you create a Security Config thread so that people can give some more recommendations?

You can create it here:

PC Setup Configuration Help & Showcase

Share your PC security set-up with the community.

malwaretips.com

Thank you, SecureKongo, I might try that one day.

 

[goodjohnjr]

Yeah! I also use it for my Apple devices.

Nice, thank you for answering that, I have never used NextDNS; I am currently using Adguard DNS.

In the past I have used OpenDNS, Norton DNS, Cleanbrowsing DNS, and several others.

 

[SpiderWeb]

My opinion is I read what everyone else here is saying and implement it LOL. Being on a Mac I think NextDNS and Google safebrowsing built-in to my Firefox is sufficient. I'm not an admin and I have a HTTPS only set up. I have yet to run into a malicious domain accidentally that is blocked so I think my security model is sufficient. I just rely on brain.exe primarily. It would be a very different story on Windows. I would probably use Kaspersky which from my experience has the best and fastest updated lists.

 

[Back3]

Nice, thank you for answering that, I have never used NextDNS; I am currently using Adguard DNS.

In the past I have used OpenDNS, Norton DNS, Cleanbrowsing DNS, and several others.

You're good with Adguard DNS.
What I like about NextDNS: it has lots of security and privacy features, it's very easy to tweak, a good user interface in many languages, apps for IOS with sliders On\off, and it's mostly free. On my PC, I just use it in my browsers. Nothing to install.

 

[Kongo]

You're good with Adguard DNS.
What I like about NextDNS: it has lots of security and privacy features, it's very easy to tweak, a good user interface in many languages, apps for IOS with sliders On\off, and it's mostly free. On my PC, I just use it in my browsers. Nothing to install.

You don't really need the app on iOS either: NextDNS - Apple Configuration Profile

 

[Moonhorse]

You don't really need the app on iOS either: NextDNS - Apple Configuration Profile

How about my mobile modem wich changes the ip after reset? I just installed windows application of nextdns and did setup it correctly, now im just waiting to see how it works


Edit 1: okay i changed the ip by reseting router, and it works smooth. Now im just about to head reading about free user limits / Maybe setting it up on mobile, i have adguard on mobiel though

 

[Kongo]

How about my mobile modem wich changes the ip after reset? I just installed windows application of nextdns and did setup it correctly, now im just waiting to see how it works


Edit 1: okay i changed the ip by reseting router, and it works smooth. Now im just about to head reading about free user limits / Maybe setting it up on mobile, i have adguard on mobiel though

Well as soon as you are disconnected to your mobile modem and are connected to another network you won't have NextDNS's filtering anymore. Why not setting it up in the mobile device itself as mentioned above?

 

[Moonhorse]

Well as soon as you are disconnected to your mobile modem and are connected to another network you won't have NextDNS's filtering anymore. Why not setting it up in the mobile device itself as mentioned above?

I got both working, seems 300k requests is monthly for free, thanks

 

[Kongo]

I got both working, seems 300k requests is monthly for free, thanks

I personally use the Pro version but 300k requests are definitely enough for one mobile device or maybe also enough to use in a desktop browser too. I have it only configured on my Firefox and on my mobile device. In the end I only need the filtering in my browser anyway.

 

[Moonhorse]

I personally use the Pro version but 300k requests are definitely enough for one mobile device or maybe also enough to use in a desktop browser too. I have it only configured on my Firefox and on my mobile device. In the end I only need the filtering in my browser anyway.

Well 19 $ / year is less than antivirus, so i dont see thats bad price for such good browser protection, for mobile its def enough and i might install it on kids devices aswell

 

[Moonhorse]

Emsisoft browser security is updated to Version 2022.3.0.35
On march 16. 2022
No changelog

Emsisoft Browser Security uses privacy-conscious security technology, so it does not collect your browsing activity data. Your browsing history is your business. Keeping you safe online is ours.

No browsing activity tracking. Just security.


Edit 2: their site blocking message has changed

 

[Zartarra]

Emsisoft browser security is updated to Version 2022.3.0.35
On march 16. 2022
No changelog

Emsisoft Browser Security uses privacy-conscious security technology, so it does not collect your browsing activity data. Your browsing history is your business. Keeping you safe online is ours.

No browsing activity tracking. Just security.


Edit 2: their site blocking message has changed

View attachment 265212

I was get the new screen when testing phishing sites earlier this week. It is an nice UI improvement. Test results are also better than with previoustests. I don't know if that a coincidence or that their protection has been improved. I really like the extension . Small in footprint, privacy friendly and a good protection.

 

[foroomas]

Hey guys, what are the main key differences when choosing these types of extensions?

 

[silversurfer]

Hey guys, what are the main key differences when choosing these types of extensions?

For me personally the following points below:

• Detection for malicious URLs (what delivering malware) or phishing.
• Users Privacy like how much user data sent to extension developer.
• Extensions performance on your browser or CPU usage of your PC.

 

[Gandalf_The_Grey]

@Evjl's Rain Can you find the time to do an up to date test?

 

[oldschool]

@Evjl's Rain Can you find the time to do an up to date test?

I just did a quick test of Emsisoft.

OpenPhish - 10/11 the miss was a dead link
PhishTank - 6/10

I consider the PhishTank the harder test as it always has more fresh links. Emsi hits the mark for me on all 3 of @silversurfer 's criteria, and it stays true to my foundational principle: "Stay safe, not paranoid".

I realize that most folks like the side-by-side tests that some MT members do.

 

[Jan Willy]

I just did a quick test of Emsisoft.

OpenPhish - 10/11 the miss was a dead link
PhishTank - 6/10

I consider the PhishTank the harder test as it always has more fresh links. Emsi hits the mark for me on all 3 of @silversurfer 's criteria, and it stays true to my foundational principle: "Stay safe, not paranoid".

I realize that most folks like the side-by-side tests that some MT members do.

As DNS-server you use Quad9. Did this blocking something?