Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 919165" data-attributes="member: 62850">Hey guys, here is the latest...VS 6.07c[URL unfurl=&quot;true&quot;]https://voodooshield.com/Download/InstallVoodooShield607c.exe[/URL]SHA-256: d84573c3c3e8b17423414e77c62d49f4af00f265e60ea8cc6fb6351fe6a1f1f4Signed malware is handled a little better in this version, but in all fairness, I do not expect the Relaxed security posture to block nation state grade signed malware <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" />.Having said that, it does look like signed malware is on the rise and it is something we are going to have to address moving forward.&nbsp; Just google &quot;how common is digitally signed malware&quot; and you will see what I mean, there is a lot of interesting info on signed malware.&nbsp; It is not going to be possible to only auto allow reputable certificate authorities, simply because there is not enough of them, and they all have this issue at least to a certain extent.&nbsp; But there are a lot of other options to deal with signed malware, but it will take a little time.BTW, Chronicle only found 3,816 signed malware samples on VirusTotal in 365 days last year, so it is probably not a huge problem yet, but it looks like it is certainly on the rise.</blockquote>

[QUOTE="danb, post: 919165, member: 62850"] Hey guys, here is the latest... VS 6.07c [URL unfurl="true"]https://voodooshield.com/Download/InstallVoodooShield607c.exe[/URL] SHA-256: d84573c3c3e8b17423414e77c62d49f4af00f265e60ea8cc6fb6351fe6a1f1f4 Signed malware is handled a little better in this version, but in all fairness, I do not expect the Relaxed security posture to block nation state grade signed malware ;). Having said that, it does look like signed malware is on the rise and it is something we are going to have to address moving forward. Just google "how common is digitally signed malware" and you will see what I mean, there is a lot of interesting info on signed malware. It is not going to be possible to only auto allow reputable certificate authorities, simply because there is not enough of them, and they all have this issue at least to a certain extent. But there are a lot of other options to deal with signed malware, but it will take a little time. BTW, Chronicle only found 3,816 signed malware samples on VirusTotal in 365 days last year, so it is probably not a huge problem yet, but it looks like it is certainly on the rise. [/QUOTE]

Verification