Online scanners help virus writers, claims Kaspersky
By Barry Collins
Posted on 21 Dec 2007 at 10:02
Online virus scanners can actually help malware writers, according to leading security firm Kaspersky.
However, Kaspersky claims the services have become a Frankenstein's Monster, with virus writers using them to check the effectiveness of their malware. "They quickly caught on to the fact that services like the ones mentioned above could be used to test how well their creations can evade popular antivirus solutions," the company claims on its VirusList blog. "If a new Trojan or worm can be detected by an antivirus, the author will deliberately modify it until it isn't detected any more.
"The result? The heuristics used in the vast majority of antivirus products are helpless when confronted by such carefully prepared malicious programs."
Kaspesrsky claims the online scanners do have their advantages. "By default, VirusScan, VirusTotal and other services send all suspicious files to antivirus companies. If a file is detected by, say, 10 antivirus products, and the other 22 don't detect it, the file will be sent to the 22 relevant virus labs for analysis and to be added to the antivirus database.
"This significantly reduces the time taken by antivirus companies to react during epidemics and also increases the overall detection rate," Kaspersky claims.
However, even this has its flipside. "If the user doesn't want a file to be sent to the antivirus company, then s/he has to disable this option when scanning the file," says Kaspersky.
"However, there's a rumour in virus writing circles that all files are sent to virus labs, regardless of whether or not the option is enabled.
"Cyber criminals are now offering a solution for the tin-foil hat brigade - similar services designed expressly for virus writers. You have to pay to use the service, but there's a guarantee that no file will be sent to an antivirus company."
Kaspersky says it hopes such sites will eventually be shut down.
Is your business a social business? For helpful info and tips visit our hub.
- 20 years of PC Pro: our first A-List
- Wikipedia's "right to be forgotten" protest hits the wrong note
- 3D printing hits the high street for plastic selfies
- 20 years of PC Pro: What amazed us in our first issue
- How Google Glass ruined my lunch hour
- Smartphone battery packs: can a USB power pack beat the festival battery blues?
- Windows Easy Transfer – not so "easy" in Windows 8.1
- Formula 1: what a difference virtualisation makes
- Office of the future: comfy chairs and tablets everywhere
- I went to Glastonbury and the only thing that got high was my smartphone
- How to write your company's IT security policy
- The key to choosing a secure password
- Please stop reposting fake Facebook messages
- Is Facebook safe for business?
- Don't rely on Chrome's password vault
- Facebook Graph Search: don't panic
- Gmail drafts and Pastebin: could they evade the email snoops?
- Applying for a job at GCHQ? Here's your plain-text password
- Google two-step verification: a must for business email
- Yes, I write down my passwords