Detecting malware such as ransomware and infostealers is the first step; however, the second step is fending off the attack. Particularly when attackers co-opt legitimate Windows tools such as Autolt to carry out their misdeeds. But what happens when a security solution cannot cope with it and does not detect the attackers, or if it does, what if it cannot put a stop to them? Answers to these questions are found in the latest Advanced Threat Protection test – ATP test for short. The test uses 10 real-world scenarios to examine whether a security solution is capable of deploying its entire arsenal of additional protection tools and defending the system as promised. If it is not possible, then the ransomware or infostealer attack was successful. But not to worry here, because our test shows that the security solutions are up to the task.
Even experts find it difficult to keep track of things with all the hacker groups that are out there. New groups are constantly appearing on the scene and renting out their infrastructure to so-called “affiliates” (i.e., criminal partners who execute the attacks) as Ransomware-as-a-Service (RaaS). This only increases the number of threats circulating online. Of course, there are also dark web services for infostealers and other malware.
No matter whether it’s Qilin, Play, Cl0p, RansomHub or Akira, hacker groups all use the latest attack methods and delivery routes available, adapting their malware – often by employing AI technology. But they are not the only ones capable of adaptation: The Advanced Threat Protection test adapts its testing every 2 months as well and incorporates these attack methods for the malware used in the test. [...]
LINK: www.av-test.org/en/news/cyberattacks-ransomware-and-infostealers-hijacking-a-windows-automation-tool/
Here is an overview of the article:
The attached data can be used to create at-a-glance overviews or statistics of the test results, starting immediately (there is no embargo).
You are free to use the results as a basis for your own reviews, as long as a reference to "AV-TEST Institute" - with an active link to our website:
www.av-test.org - is given as source. Thank you!
Even experts find it difficult to keep track of things with all the hacker groups that are out there. New groups are constantly appearing on the scene and renting out their infrastructure to so-called “affiliates” (i.e., criminal partners who execute the attacks) as Ransomware-as-a-Service (RaaS). This only increases the number of threats circulating online. Of course, there are also dark web services for infostealers and other malware.
No matter whether it’s Qilin, Play, Cl0p, RansomHub or Akira, hacker groups all use the latest attack methods and delivery routes available, adapting their malware – often by employing AI technology. But they are not the only ones capable of adaptation: The Advanced Threat Protection test adapts its testing every 2 months as well and incorporates these attack methods for the malware used in the test. [...]
LINK: www.av-test.org/en/news/cyberattacks-ransomware-and-infostealers-hijacking-a-windows-automation-tool/
Here is an overview of the article:
- High level of defense against dangerous ransomware and infostealers
- The 10 test scenarios
- The ATP test of 8 security packages for consumer users
- The ATP test of 9 security solutions for corporate users
- The ATP test with many excellent scores
The attached data can be used to create at-a-glance overviews or statistics of the test results, starting immediately (there is no embargo).
You are free to use the results as a basis for your own reviews, as long as a reference to "AV-TEST Institute" - with an active link to our website:
www.av-test.org - is given as source. Thank you!
