VoodooShield/Cyberlock

plat · Sep 16, 2023

Thanks Krusty. Updated right away to Cl v. 7.49.

moredhelfinland · Sep 17, 2023

Just tested Cyberlock with DefenderUI against various bazaar samples. Very, very effective combo.

digmor crusher · Sep 17, 2023

moredhelfinland said: ↑

Just tested Cyberlock with DefenderUI against various bazaar samples. Very, very effective combo.
Click to expand...

I would be interested to know which blocked first and which blocked the majority of samples? Thanks.

Krusty · Sep 21, 2023

Email from Dan:

Hey Guys!

CyberLock 7.50 has been released to the public, thank you for your help! It is pretty much the same as 7.49.

CyberLock 7.50

https://cyberlock.global/Download/InstallCyberLock.exe

SHA-256: e3ada4fc8fc6cffcf9dc302eef03db06249ac22495e8c474d328ae25e5cdeb90

Thank you,

Dan
Click to expand...

moredhelfinland · Sep 21, 2023

digmor crusher said: ↑

I would be interested to know which blocked first and which blocked the majority of samples? Thanks.
Click to expand...

Many .js .bat etc. 5bcebf01c55b24ba2097f86c5074898ff8f04aca40064903d3afc2ca0593dde2
5c3eb5b07a659a40a9ae64ff894a99ba28e37396025e79ae5ac69da610b00605

Krusty · Oct 7, 2023

Email from Dan:

Hey Guys!

Here is the latest version of CyberLock! There were some pretty serious changes under the hood, but it should be perfectly stable.

CyberLock has always been focused on preventing malware in the context of Web Apps (since that is where most malware originates), and keeping the user safe while engaging in risky activities. We are adding new security mechaanisms to further strengthen CyberLock’s efficacy, especially as it relates to attacks not associated with Web Apps (e.g. LOLBins, vulnerable processes, etc.). This will increase our efficacy, but should not produce too many unwanted blocks, simply because these types of attacks are not common. But if you experience any unwanted blocks, please let me know!

CyberLock 7.51

https://cyberlock.global/Download/InstallCyberLock751.exe

SHA-256: 1eb9ad548633bcfeb7e55d4e14c77cf6ce31e6a40b60900828376f59517fcffe

Have a great weekend!

Thank you,

Dan
Click to expand...

Krusty · Oct 9, 2023

Email from Dan:

Hey Guys!

Here is CyberLock 7.52. There were a couple of minor bug fixes from the changes, and we also tweaked the way CyberLock starts up and shuts down. So if it starts up or shuts down funny, please let me know!

CyberLock 7.52

https://cyberlock.global/Download/InstallCyberLock752.exe

SHA-256: 1a206a565c2c4f75e26670ffcd7f68decd289fa85accce0d39575b1ee95e2029

Thank you guys!

Dan
Click to expand...

Krusty · Oct 28, 2023

Latest email from Dan:

Hey Guys!

Here is the latest version of CyberLock that has implemented the new Attack Chains feature. Please keep in mind the Attack Chains feature is very new and there are tons of really cool features we will add soon. You will see colored arrows in the Attack Chain list. These are based on rules that we need to finish defining, so the colored arrows do not necessarily represent what actions CyberLock is going to take at each link of the chain. We have written most of the basic rules, but we need to tweak the rules a little and add a few more.

Ultimately, hopefully within a month or so, the colored arrows and rules will match CyberLock’s actions, and then we will be able to fully implement this new feature. It is actually going to be quite easy and fun to do, and we are a lot further along than I thought we would be. And if things go right, we might even be able to do away with the command lines feature altogether, and instead of having a Whitelist, we will have an App list, Web App list, Vulnerable App list, etc. It is difficult to explain, but it is going to be very cool. We will also be able to eliminate most of the remaining unwanted blocks.

Some of the rules for the new attack chain feature are already implemented and auto allowing items that would otherwise be blocked. You can search the developer log for “RuleID: 77” to see these items.

So we have a little more work to do, but I wanted you guys to see what the new attack chains feature is all about, because trust me, there are going to be tons of really cool things we can do with it.

It takes an hour or so to start really building up the attack chain list in CyberLock Settings. In fact, if you restart your computer after installing the new version, it will add a lot of them pretty quick.

This version is completely stable, but it is labeled a beta because there is a super small chance that one of the rules that are already implemented is not correct, so I just want you guys to be aware of this so you can be extra careful until we have the rules where we want them.

You guys will understand pretty quickly how this new feature works, but basically, if you see a red arrow, that means CyberLock should block the attack chain at that point. Like I was saying, the rules are not 100% right yet, so if you see any attack chains that do not seem correct, please let me know and we can fix it. Once they are all fixed, we will fully implement the rules so that CyberLock will block the attack chains at the red arrows. BTW, if you see any white arrows, please let me know, that means that none of the rules were applied to the arrow.

Green arrows: System Processes

Blue arrows: Allow / Benign / Safe

Red arrows: Block / Malicious / Not Safe

CyberLock 7.53 beta

https://cyberlock.global/Download/InstallCyberLock753beta.exe

SHA-256: 6edee845df7afdfa09db64e7491bb5ac3378c31bc99ee0f7d96342cb8b6e20d0

Have a great weekend!

Dan
Click to expand...

Baldrick · Oct 31, 2023

Is anyone seeing very high CPU usage by Cyberlock.exe for a short while after the desktop appears, circa 60%+?

Triple Helix · Oct 31, 2023

Baldrick said: ↑

Is anyone seeing very high CPU usage by Cyberlock.exe for a short while after the desktop appears, circa 60%+?
Click to expand...

Yes I have seen that for awhile and found that WhiteListCloud would be scanning, I never mentioned it to Dan though so I don't know if it's normal. I will send him an email now just in case!

Baldrick · Nov 1, 2023

Hi TH, hope that you are well? Thanks for responding. Good to know.

I have only seen this happening since upgrading to v7.53...never noticed this before and am wondering if it has some thing to do with the Attack Chain functionality.

Am just wondering If there is any info that can be sent to Dan? I did not want to contact him without checking first as to whether it was just me or if others were seeing this.

Cheers, Baldrick

stapp · Nov 1, 2023

@Baldrick
I saw the high CPU usage on 7.53 after desktop was reached, but I admit to not having looked at it until you mentioned it.
I uninstalled 7.53 and removed all folders etc and rebooted.
Reinstalled 7.53 and it seems a lot better so far.

Remember to make a note of your product key etc for it before uninstalling

Triple Helix · Nov 1, 2023

Hey Guys,

Here is the lasted beta version. The high CPU issue should be fixed, if not please let me know! I have not started on adjusting the rules yet, so the arrow colors will still be a little off.

CyberLock 7.54 beta

https://cyberlock.global/Download/InstallCyberLock754beta.exe

SHA-256: 6d83b31b8da68ca71ced67539ea0862c07d0fafe5e98fe873cddd82586b10038

Thank you,

Dan
Click to expand...

stapp · Nov 1, 2023

7.54 installed on Win 10.
Got 2 red arrow lines.

Just before I installed it over the top of 7.53
I got an autoblock for sc.exe

Triple Helix · Nov 1, 2023

stapp said: ↑

7.54 installed on Win 10.
Got 2 red arrow lines.

Just before I installed it over the top of 7.53
I got an autoblock for sc.exe
View attachment 276103

View attachment 276104

View attachment 276105
Click to expand...

Because:

Yes I know about VT posting but I'm showing that it is unsigned! https://www.virustotal.com/gui/file...8ae5c7cb5bd1872a6009a4cd1506554a9aba9/details

Baldrick · Nov 1, 2023

Cheers TH.

Triple Helix · Nov 1, 2023

Baldrick said: ↑

Cheers TH.
Click to expand...

Your welcome buddy! Please post or send Dan an email if you see any other issues!

stapp · Nov 1, 2023

@Triple Helix
Yes I knew it was unsigned (the file properties tells you that) As far as I know it has been unsigned for years.
With it being a Windows File, I thought Dan might like to make an allowance for it.

Triple Helix · Nov 1, 2023

Well VS is always picky with unsigned files even the ones from Microsoft when the unsigned file triggers another Command so just allow as I do if you know it's safe like in this case.

Triple Helix · Nov 1, 2023

@stapp this is what I see in mine:

Baldrick · Nov 1, 2023

Triple Helix · Nov 3, 2023

Another Beta Update from Dan!

Hey Guys,

Here is the latest CyberLock. The only change is this version is the command lines were fixed and updated. For anyone who had issues with command line blocks, you might want to clear all of your command lines and see if this version still blocks them, and if so please let me know.

CyberLock 7.55 beta

https://cyberlock.global/Download/InstallCyberLock755beta.exe

SHA-256: ab11deea4ae257de823d7a5eee843dda1fcb12a8cd2e8abb200a49551691bd92

Thank you,

Dan
Click to expand...

plat · Nov 3, 2023

I usually stick to releases but did install this beta build (7.55 beta) as I was having some very minor issues with command-lines getting blocked and particularly w/installing certain games. Thanks for the info! Runs great overall, aka: radio silence.

Triple Helix · Nov 3, 2023

plat said: ↑

I usually stick to releases but did install this beta build (7.55 beta) as I was having some very minor issues with command-lines getting blocked and particularly w/installing certain games. Thanks for the info! Runs great overall, aka: radio silence.
Click to expand...

Same here unless I run into a unsigned file when I install a not well known program which is normal for CL aka VS.

Triple Helix · Nov 5, 2023

Another Beta from Dan!

Hey Guys,

Here is the latest beta. I still have not added any rules to the new Attack Chain feature, but the feature itself is much more refined and efficient. I also optimized the Command Lines even more.

You might want to clear your old attack chains by going to the Attack Chains tab and clicking the Clear Attack Chains button at the bottom.

CyberLock 7.56 beta

https://cyberlock.global/Download/InstallCyberLock756beta.exe

SHA-256: e3086919f60342c61688094b058d453f457494aaf46633a6c4451c323087b0bf

Have a great Sunday, thank you guys!

Dan
Click to expand...

Log in or Sign up

VoodooShield/Cyberlock

plat Registered Member

moredhelfinland Registered Member

digmor crusher Registered Member

Krusty Registered Member

moredhelfinland Registered Member

Krusty Registered Member

Krusty Registered Member

Krusty Registered Member

Baldrick Registered Member

Triple Helix Specialist

Baldrick Registered Member

stapp Global Moderator

Triple Helix Specialist

stapp Global Moderator

Triple Helix Specialist

Baldrick Registered Member

Triple Helix Specialist

stapp Global Moderator

Triple Helix Specialist

Triple Helix Specialist

Baldrick Registered Member

Triple Helix Specialist

plat Registered Member

Triple Helix Specialist

Triple Helix Specialist

Log in or Sign up

VoodooShield/Cyberlock

plat Registered Member

moredhelfinland Registered Member

digmor crusher Registered Member

Krusty Registered Member

moredhelfinland Registered Member

Krusty Registered Member

Krusty Registered Member

Krusty Registered Member

Baldrick Registered Member

Triple Helix Specialist

Baldrick Registered Member

stapp Global Moderator

Triple Helix Specialist

stapp Global Moderator

Triple Helix Specialist

Baldrick Registered Member

Triple Helix Specialist

stapp Global Moderator

Triple Helix Specialist

Triple Helix Specialist

Baldrick Registered Member

Triple Helix Specialist

plat Registered Member

Triple Helix Specialist

Triple Helix Specialist

Useful Searches