Hot Take [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

[Evjl's Rain]

Comparison between browser extensions

Test 29/12
Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

Test 24/11
Q&A - [Updated 24/11/2018] Browser extension comparison: Malwares and Phishings

Test 12/11
Q&A - [Updated 12/11/2018] Browser extension comparison: Malwares and Phishings

Test 7/11
Q&A - [Updated 7/11/2018] Browser extension comparison: Malwares and Phishings

Test 6/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 3/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 2/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Test, quick 1/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Fun test 25/7/2018
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 24/7/2018 (most comprehensive, as possible)
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 19/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 18/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 10/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 7/6/2018
Q&A - [Updated 7/6/2018] Browser extension comparison: Malwares and Phishings

Updated 3/6/2018
Q&A - [Updated 3/6/18] Browser extension comparison: Malwares and Phishings

Updated 25/4/2018
Poll - [Updated 25/4/18] Browser extension comparison: Malwares and Phishings

Update: 23/3/2018
Poll - [Updated 23/3/18] Browser extension comparison: Malwares and Phishings


Browser: Google Chrome 65 x64
Malware and phishing links: 10 malc0de, 10 vxvault, 10 openphish, 10 verified phishtank, 10 unverified phishtank
Total: 50 links

Spoiler: Links

Dropbox - link test 17-3-2018.txt

Extensions: recently downloaded from Chrome Web Store
- Google Safe Browsing (built-in chrome's protection)
- AdGuard AdBlocker: default settings, uses Google Safe Browsing (delayed) and their own database
- Avira browser safety: default settings
- Norton Safe Web: default settings
- Bitdefender Trafficlight: default settings, it rarely blocks any malware links, just old ones
- Avast Online Security: default settings, only has phishing protection, expected to score 0 against malwares
- Netcraft Extension: default settings, only has phishing protection, expected to score 0 against malwares
- uBlock Origin with some additional filters

Spoiler: ublock origin filters

http://hosts-file.net/emd.txt
http://hosts-file.net/exp.txt
http://hosts-file.net/pup.txt
http://hosts-file.net/psh.txt
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_URLBL.txt

NOTE: the result can vary from day-to-day. Tomorrow with different links, the result can be very different. All are live links but they can be dead a few minutes after the test. No duplication

Results:

Winner: Google Safe Browsing

 

[Azure]

Norton Safe Web has been released for Microsoft Edge
Get Norton Safe Web - Microsoft Store

 

[Moonhorse]

Norton Safe Web has been released for Microsoft Edge
Get Norton Safe Web - Microsoft Store

Thanks for update.

Using edge as secondary browser with nanoblocker, norton safe web and bitwarden + duckduckgo as search engine. Its nice alternative but still wont beat chrome for me

 

[Evjl's Rain]

Link test 10/7/2018

chrome: 27/29
norton: 4/29!!!
Avira: 24/29
WDBP: 24/29 -> warned still downloaded
malwarebytes: 26/29
squidblacklist (ublock filter): 17/29
comodo: 27/29
Edge: 27/29

resource usage:
Norton < comodo < WDBP < ublock < malwarebytes < avira

comodo for safe websites is really really fast but when it detected malwares, it will redirect to a comodo page, which extremely slow to load

WDBP needs respawn/recovery time, at least 1-2 seconds

 

[oldschool]

Please keep testing @Evjl's Rain. This thread is great. Edge + Nano Adblocker = Nice!

 

[Yellowing]

No more uBlock Origin?

 

[Evjl's Rain]

No more uBlock Origin?

yes ublock is included, squidblacklist is a filter of ublock origin
besides hphosts (malwarebytes) and squidblacklist, other filters are useless and do poorly in my tests

p/s: I also included the resource usage in the previous post

 

[Yellowing]

Oh, really? That's bad. But you did the newest tests with all available uBlock filters too, just to be sure that that is still the case, right? :notworthy:
Did you also make test with multiple at the same time? For example I have uBlock, WDBP and use Chrome, so it's also SafeBrowsing enabled. This sounds like it would block everything.

 

[Evjl's Rain]

I

Oh, really? That's bad. But you did the newest tests with all available uBlock filters too, just to be sure that that is still the case, right? :notworthy:
Did you also make test with multiple at the same time? For example I have uBlock, WDBP and use Chrome, so it's also SafeBrowsing enabled. This sounds like it would block everything.

I have done some combinations before
I end up with Norton safe web + WDBP + comodo + google safe browsing
the first 3 are the lightest and yet quite effective
malwatebytes comsumes more resources and I also had a problem with a website

I did combine all ublock filters but they are not good enough compared to extensions
too many filters will slow down ublock more than using extensions
the best filters are squidblacklist and hphosts. The rest are average or almost useless

 

[Brie]

which comodo? there are 3.

Comodo Online Security
Comodo
Protects against phishing and malicious websites.
--------------------------------------------------------------------------------------------------------------


COMODO Cloud Antivirus
offered by www.comodo.com
COMODO Cloud Antivirus
--------------------------------------------------------------------------------------------------------------



Comodo AdBlocker
offered by www.comodo.com
Based on the same open source codebase used by over 50 million people, improved by blocking malware, tracking & ALL display ads

 

[Evjl's Rain]

the first one: comodo online security

 

[Brie]

thank you all for the info.

 

[Burrito]

Link test 10/7/2018

norton: 4/29!!!

hmmmmm.... strange result based on the history of your testing.

I'll be watching your next test to see if this was an aberration, or if NSW is just not as good anymore.

Thanks Evjl's Rain.

 

[Sunshine-boy]

we can use Avira SafeSearch instead of Avira extension.
I use malwarebytes+Adguard desktop(Yandex api+chrome api)+avira search engine.

 

[goodjohnjr]

Link test 10/7/2018

chrome: 27/29
norton: 4/29!!!
Avira: 24/29
WDBP: 24/29 -> warned still downloaded
malwarebytes: 26/29
squidblacklist (ublock filter): 17/29
comodo: 27/29
Edge: 27/29

resource usage:
Norton < comodo < WDBP < ublock < malwarebytes < avira

comodo for safe websites is really really fast but when it detected malwares, it will redirect to a comodo page, which extremely slow to load

WDBP needs respawn/recovery time, at least 1-2 seconds

Hello Evjl's Rain,

Thank you very much for creating this thread, this is my current favorite thread that I have been following for awhile now almost every day, and I finally created an account here at MalwareTips so that I can finally comment sometimes.

This thread is very helpful for those of us who try to keep our security setups updated especially at the browser / internet level, which is not only helpful for us, but is also helpful for people we know and people we help so that we can also help them stay updated security-wise.

Is there any chance that you and / or someone else on this thread will also start testing some of the removed browser extensions that used to be in the previous tests and some that were never tested here yet like: Bitdefender TrafficLight, Avast Online Security, Web Of Trust (WOT), AdGuard AdBlocker (Extension), and maybe just maybe a McAfee extension and / or Dr. Web extension and / or Panda Safe Web (if any of these last few are even worth adding)?

I would be curious to know if any of them have improved or not and / or if any of them require a recovery time like Windows Defender Browser Protection currently does.

Also it would be nice if some of the people here who use Forticlient, K9 Web Protection, Kaspersky, Sophos / HitmanPro, maybe Emsisoft, et cetera could try to convince and / or ask them to release browser extensions because their web detection seems / is said to be good; and so that those of us who do not use their other products could use their browser extensions.

Thank you very much,
-John Jr

 

[Evjl's Rain]

Is there any chance that you and / or someone else on this thread will also start testing some of the removed browser extensions that used to be in the previous tests and some that were never tested here yet like: Bitdefender TrafficLight, Avast Online Security, Web Of Trust (WOT), AdGuard AdBlocker (Extension), and maybe just maybe a McAfee extension and / or Dr. Web extension and / or Panda Safe Web (if any of these last few are even worth adding)?

hello thank you for comment. I really appreciate that
for these extensions, I probably won't include them in the future because they have been proven to be ineffective against malwares. In the past, I didn't test them simultaneously, I tested each link 1 by 1, so no need for more recovery time
some of them are not designed to block malwares: avast, WOT
some of them only block a link when the link is fully loaded -> too late to intercept download malwares: avast, bitdefender
Panda maliciously changes your search engine to mystart -> no one wants to use it
DrWeb: only works when you right-click on the link-> scan with drweb => so it doesn't block links when you browse
mcafee: only warns but doesn't block

Also it would be nice if some of the people here who use Forticlient, K9 Web Protection, Kaspersky, Sophos / HitmanPro, maybe Emsisoft, et cetera could try to convince and / or ask them to release browser extensions because their web detection seems / is said to be good; and so that those of us who do not use their other products could use their browser extensions.

I don't think they would, they don't want to give their products for free
BD has an extension but it is crap
avast released their extension to block phishings because avast antivirus has a weak phishing filter
norton has close to useless web filter so they have to use extension for that purpose and to supplement download insight

 

[cryogent]

Red: I recommend
Blue: effective but I don't use, up to you
Orange: I don't like because they are large

Ad/tracker/widget
English filter or easylist
Fanboy’s Enhanced Tracking List
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
https://raw.githubusercontent.com/Hubird-au/Adversity/master/Adversity.txt
https://raw.githubusercontent.com/zpacman/Blockzilla/master/Blockzilla.txt
Adguard’s Annoyance List
http://www.jabcreations.com/downloads/adblock-filters.php
https://raw.githubusercontent.com/I...k-Filters-Plus/master/uBlock-Filters-Plus.txt

optional ad/tracking:
http://1hosts.cf/
very large: https://hosts-file.net/ad_servers.txt

Malwares, ransomwares, cryptojacking, PUPs, hijacks, phishing
https://www.squidblacklist.org/downloads/dg-malicious.acl

Optional, very heavy, hphosts malwares, ransomware (emd), phishing (fsa), exploits (exp), hijack (hjk)
https://hosts-file.net/emd.txt
https://hosts-file.net/exp.txt
https://hosts-file.net/fsa.txt
https://hosts-file.net/hjk.txt

cryptojacking
https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt
https://raw.githubusercontent.com/ZeroDot1/CoinBlockerLists/master/list.txt
https://raw.githubusercontent.com/ZeroDot1/CoinBlockerLists/master/list_optional.txt
alternative: EasyPrivacy

PUPs
https://hosts-file.net/pup.txt

ransomwares (optional)
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_URLBL.txt

Hi Evjl's Rain, i understand that the others filters inside uBlock is not enabled and only that custom filters (Red - recomended) ?

 

[Evjl's Rain]

Hi Evjl's Rain, i understand that the others filters inside uBlock is not enabled and only that custom filters (Red - recomended) ?

I recommend you use only the red and blue filters
you may keep or disable the default filters. Up to you but disable some default and keep some to reduce the number of filters

 

[Yellowing]

Can you make a list with the same color coding, but for the included options? Also are some of these already in uBlock?
If I understand you correctly only two of these are already in uBlock, right?

 

[cryogent]

Evjl's Rain - Ok, thank you.

 

[Evjl's Rain]

Can you make a list with the same color coding, but for the included options? Also are some of these already in uBlock?
If I understand you correctly only two of these are already in uBlock, right?

I will try to find a way to do that because MT automatically converts them into links, which removes the color
easylist
fanboy enhanced
easyprivacy
adguard annoyance
these are the default filters in ublock, enabled or not enabled by default