Cyber Risks · Krebs on Security

Like Kaspersky, Russian Antivirus Firm Dr.Web Tested Rivals

Summary: Dr.Web CEO Boris Sharov told KrebsOnSecurity that his company ran experiments similar to those Reuters attributed to Kaspersky, submitting slightly modified clean files to antivirus testing labs to see which products would flag them. Sharov said seven antivirus products detected the clean files as malicious almost immediately, and a week later half of the products were flagging them, though Dr.Web never flagged the files itself.

Bottom line: Sharov's account suggests some antivirus products sold to enterprises gain market share by following competitors' detections rather than running their own analysis of each file, which he said can cause false positives that are costly and disruptive for customers.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related