Black Market Trade in Antivirus Exploits

AutoCascade · Mar 2, 2016

http://googleprojectzero.blogspot.com.au/2015/09/kaspersky-mo-unpackers-mo-problems.html

Security Software Considered Harmful?

We have strong evidence that an active black market trade in antivirus exploits exists. Research shows that it’s an easily accessible attack surface that dramatically increases exposure to targeted attacks.

https://wikileaks.org/hackingteam/emails/emailid/71862

https://lh4.googleusercontent.com/dKLW9CoSFF8J2ssu9UulPVcrZLz-r4cXLx58MatFaTdxLKYTMj9z-80QnHEENDphjwNpQUoNObp__Qs9CEnzF4jLC0KWoz-qwbD8aH1Urr_W2fl4ydWfbKBoFaEDa53WBQ=s1600

For this reason, the vendors of security products have a responsibility to uphold the highest secure development standards possible to minimise the potential for harm caused by their software.

Ignoring the question of efficacy, attempting to reduce one’s exposure to opportunistic malware should not result in an increased exposure to targeted attacks.

Conclusion

In future, we would like to see antivirus unpackers, emulators and parsers sandboxed, not run with SYSTEM privileges. The chromium sandbox is open source and used in multiple major products. Don’t wait for the network worm that targets your product, or for targeted attacks against your users, add sandboxing to your development roadmap today.
Click to expand...

jadinolf · Mar 2, 2016

Thank you for this.

ronjor · Mar 3, 2016

This post is a duplicate of this post. > https://www.wilderssecurity.com/threads/av-exploits-being-sold-on-dark-web.380031/

Log in or Sign up

Black Market Trade in Antivirus Exploits

AutoCascade Registered Member

Attached Files:

1pasted image 0.png

1pasted image 0.png

jadinolf Registered Member

ronjor Global Moderator

Log in or Sign up

Black Market Trade in Antivirus Exploits

AutoCascade Registered Member

Attached Files:

1pasted image 0.png

1pasted image 0.png

jadinolf Registered Member

ronjor Global Moderator

Useful Searches