3 ms·

So go looking for it. Good news doesn't make the news, it makes people's blogs. Go google for folks talking about how they didn't get their entire network crypt

• udev4096 3y ago
  AV at it's best prevents script kiddies. It is ridiculously easy to bypass an AV. However, most of the organizations rely on EDRs, not AVs
  • charcircuit 3y ago
    AVs help prevent malware from scaling. Sure you can bypass an AV to hack O(10) pole, but can you bypass it to hack O(1000000) people?
    • fullspectrumdev 3y ago
      The scaling problem isn’t that hard with traditional signature based AV, the upfront work is largely the same irrelevant of scale of infections. You just keep updating your obfuscator/packer tool and constantly deploy new, undetected binaries. There’s online “crypter” services which are quite cheap that will do this for you - give you a constant stream of new, unique, undetected versions of your malware executable. AV is basically very good at blocking yesterdays threats - the shit it knows about. Professional blackhats just factor constant evasion into their operating costs (which includes other costs like new C&C domains, VPS’s, buying traffic for installs. etc) anyway.
      • datadrivenangel 3y ago
        It's not hard, it just adds cost. If the cost is more than the reward, we get less malware. This is good.