Reply to thread

Message

<blockquote data-quote="RoboMan" data-source="post: 1090144" data-attributes="member: 53544">False, hence why behavioural analysis of files exist. The concept of signature-based antivirus alone is antique.Again, not entirely true. An antivirus can be triggered when it identifies at least one attack chain of them all. It may not identify the obfuscation technique, or the process injection, but something as simple as a constant call home can trigger a firewall rule and expose the whole attack.Ridiculous argument. Every software can have vulnerabilities. Also, this means a malware file must be packed with code to bypass every single antivirus&#039; containment module, given the strange fact that the cybercriminal has identified a way to bypass them all. This is no evidence whatsover to say sandboxes don&#039;t work.True, but ALL software open possibilities for vulnerabilities and backdoors. At least antivirus can help you protect you from exploitation of OS vulnerabilities.LolNo need, you already use Windows or MacOs.Okay, maybe I&#039;m in hater mode with this one, but this is not true. Malware can be triggered without double clicking it, for example by extracting it.Excellent safety habit, but you can&#039;t expect Average Joes to acknowledge this, hence why antiviurus are important to them.False. Despite being harder to monitor since there&#039;s no file, behavioral approach is usually effective for this type of malware, since file or not, malware usually behaves the same way.</blockquote>

[QUOTE="RoboMan, post: 1090144, member: 53544"] False, hence why behavioural analysis of files exist. The concept of signature-based antivirus alone is antique. Again, not entirely true. An antivirus can be triggered when it identifies at least one attack chain of them all. It may not identify the obfuscation technique, or the process injection, but something as simple as a constant call home can trigger a firewall rule and expose the whole attack. Ridiculous argument. Every software can have vulnerabilities. Also, this means a malware file must be packed with code to bypass every single antivirus' containment module, given the strange fact that the cybercriminal has identified a way to bypass them all. This is no evidence whatsover to say sandboxes don't work. True, but ALL software open possibilities for vulnerabilities and backdoors. At least antivirus can help you protect you from exploitation of OS vulnerabilities. Lol No need, you already use Windows or MacOs. Okay, maybe I'm in hater mode with this one, but this is not true. Malware can be triggered without double clicking it, for example by extracting it. Excellent safety habit, but you can't expect Average Joes to acknowledge this, hence why antiviurus are important to them. False. Despite being harder to monitor since there's no file, behavioral approach is usually effective for this type of malware, since file or not, malware usually behaves the same way. [/QUOTE]

Verification