Karmadyota 0 Posted August 27, 2017 Posted August 27, 2017 Hello Everybody, As we have witnessed a mass ransomware attack emerged globally stealing and giving problems to many peoples around the globe So taking a step towards prevention I have my PC installed with ESET Internet Security. And I was quite happy with it . But I doubt its anti-malware protection because recently I ran the ransim setup from www.knowbe4.com/ransomware-simulator In the 1st run it scored a 100% in the blocking of all the threats. But When I ran it for the 2nd time it blocked none and the setup showed I am 100% vulnerable if an actual ransomware attack happens. But I am happy that during the 2nd time it blocked none but sent the 10/10 ransomware variants to ESET as a Sample. Would it be effective ? Will ESET score the perfect 10 as it did in the 1st Run?
Administrators Marcos 5,467 Posted August 27, 2017 Administrators Posted August 27, 2017 This test doesn't show how effective AVs are against encryption. Firstly, there are many ways how encryption can be done. The simulator simulates the behavior that can happen when files get encrypted but it cannot cover all ways of encryption. Secondly, legitimate software may also work in a way that is utilized by ransomware. Encryption as such is not always malicious and it's been used for perfectly legitimate purposes for ages. It is necessary to correctly distinguish between malicious and innocuous applications which may be a daunting task.
itman 1,807 Posted August 27, 2017 Posted August 27, 2017 You might also want to read through this thread on the subject: https://forum.eset.com/topic/10792-ransomware-simulators-a-detailed-analysis/
Recommended Posts