Proactive Security Challenge (Matousec) vs. real malware

Link:
http://www.matousec.com/matousec/blog.php?blog=147-Proactive_Security_Challenge_vs._real_malware_

Proactive Security Challenge:
http://www.matousec.com/projects/proactive-security-challenge/results.php

 

Since I'm not in the habit of downloading and executing malware, I would find it a more useful, realistic, practical, and interesting challenge for them to put the malware samples into existing web-based exploits on their test pages and let users go to the page to see if their security can block the download/execution of the exploit.

It would be easy for them to get a current exploit kit floating around the internet and have the exploits point to their malware samples from their test page.

----
rich

 

If it talks like a Matousec sound like a Matousec walks like a Matousec then it is a Matousec and not to be trusted.

nessy

 

Unless your favorite security program finished near the top

 

Matousuck

 

indeed

 

Most Autoruns and old methods... leaktest, thermite, AWFT, wallbreaker, etc. Just confirming that malware need to be far less sophisticated than matousec tests to spread...

 

Indeed,the proliferation of rogue AMs show it's much easier to just let the user install the malware for them.