Cyber Risks · Krebs on Security

Virus Scanners for Virus Authors, Part II

Summary: Krebs on Security describes subscription services such as scan4you.net, which charges 15 cents per file to scan malware against 30 anti-virus products while promising not to share the results with the vendors, and avcheck.ru, which offers similar scanning with fewer engines and fewer alert options. Scan4you also lets customers set a rescan interval of 1 to 24 hours and receive alerts by e-mail, ICQ, Gmail chat, or Jabber when an anti-virus product begins detecting their file.

What's compelling: Free scanners like VirusTotal and Jotti feed samples back to the anti-virus vendors, so malware authors pay 15 cents a scan to keep their samples out of those databases and learn the moment detection catches up. That price point means a criminal can test a sample against 30 engines for pocket change and keep iterating until it slips past the products your users run.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related