VirusTotal is adding new threat detection capabilities

guest · Jun 23, 2020

VirusTotal Adds Cynet's Artificial Intelligence-Based Malware Detection
June 23, 2020
https://thehackernews.com/2020/06/virustotal-cynet-malware-detection.html

VirusTotal, the famous multi-antivirus scanning service owned by Google, recently announced new threat detection capabilities it added with the help of an Israeli cybersecurity firm.
With the onslaught of new malware types and samples, researchers rely on the rapid discovery and sharing provided by VirusTotal to keep their companies safe from attacks.

The benefits of this partnership are twofold. First, Cynet provides the VirusTotal partner network cutting-edge threat intelligence from its ML-based detection engine (CyAI) that actively protects the company's clients around the globe.
CyAI is a continuously learning and evolving detection model that routinely contributes information about new threats that are not available in VirusTotal.

Cynet routinely outperforms third party and open source detection platforms and is frequently relied upon in incident response cases when underlying threats remain hidden from other solutions.
Click to expand...

Second, Cynet will leverage intelligence in VirusTotal to inform its CyAI model in order to continuously improve its detection capabilities and accuracy.
Click to expand...

VirusTotal: VirusTotal += Cynet

We welcome the Cynet engine to VirusTotal. In the words of the company:

“Cynet 360 is an autonomous breach protection platform that includes multi-layered anti malware capabilities including AI-based static analysis, process behavior monitoring, memory monitoring, sandboxing, and granular whitelisting, interlocking together to protect against malicious executables, exploits, scripts, Macros, LOLbins, malicious process injection and other fileless attacks. [...]”
Click to expand...

guest · Oct 31, 2020

VirusTotal += Gridinsoft
We welcome the Gridinsoft engine to VirusTotal. In the words of the company
October 29, 2020
https://blog.virustotal.com/2020/10/virustotal-gridinsoft.html

“Gridinsoft provides an autonomous multi-layered malware detection engine based on a powerful malware-analyzing laboratory. We combine the most relevant file inspection methods with an effective interaction of our development and analyst teams. They gather threat patterns, classifying and replenishing the database with rising threats. At the same time, the Gridinsoft Scan24 engine fills with new processing patterns. Gridinsoft Antimalware Neural Network (our GANNet) is composed of several modules using deep neural networks to provide high detection rates. All these together give a reliable and consistent result reified as a rapid scanner with minimal impact on resources and no conflict with other software.”

Gridinsoft has expressed its commitment to follow the recommendations of AMTSO and, in compliance with our policy, facilitates this review by NioGuard Security Lab, an AMTSO-member tester.
Click to expand...

guest · Dec 1, 2020

VirusTotal += BitDefender Falx
December 1, 2020
https://blog.virustotal.com/2020/12/virustotal-bitdefender-falx.html

We welcome the BitDefender Falx scanner to VirusTotal. This engine is specialized in Android and reinforces the participation of Bitdefender that already had two engines in our service, their multi-platform scanner (BitDefender) and a 100% machine learning engine (BitDefenderTheta). In the words of the company:

“Bitdefender offers a cloud-based malware detection product for Android. It is built on several automated systems that perform different methods of static and dynamic analysis. Powerful machine learning models and other complex threat detection techniques form a state of the art security solution capable of detecting previously-unseen advanced malware. The cloud-based approach offloads computationally intensive tasks to a distributed cloud environment to deliver the best protection with no impact on system or battery performance.”

Bitdefender has expressed its commitment to follow the recommendations of AMTSO and, in compliance with our policy, facilitates this review by AV-Comparatives, an AMTSO-member tester.
Click to expand...

guest · Dec 10, 2020

VirusTotal Multisandbox += Sangfor ZSand
December 10, 2020
https://blog.virustotal.com/2020/12/virustotal-multisandbox-sangfor-zsand.html

VirusTotal multisandbox project welcomes Sangfor ZSand. The ZSand currently focuses on PE files，with extensions to other popular file types like javascript and Microsoft office to be released soon.
n their own words:

ZSand, developed by Sangfor Technologies’ Cloud Computing & Security Team, is an agentless behavioral analysis engine incorporating multiple innovative techniques. At the systems level, zSand employs Two-Dimensional Paging (TDP) techniques to inject hidden breakpoints, enabling accurate monitoring of the API calling sequence of a given process for further fine-grained analysis.
At the GUI level, interactions are simulated by the virtual network console (VNC) and visual artificial intelligence (AI) techniques, providing a lifelike and fully functional sandbox.

At the detection level, zSand identifies all forms of malware, including vulnerability exploits, by uncovering malicious behaviors and synergistically applying both conventional rule-based approaches and advanced AI algorithms [...]
Click to expand...

guest · Aug 17, 2022

VirusTotal += Google
August 10, 2022

Today, we are happy to announce that in addition to Google's URL scanning service (Safe Browsing), which has been integrated with VirusTotal, Google is now also providing a file scanning service to the VirusTotal community. In their own words:

"Google protects billions of users every day through its advanced threat detection and security capabilities. This integration with VirusTotal is one of multiple detection layers from Google to protect its users from malware and other malicious files."

Google has expressed its commitment to follow the recommendations of AMTSO and, in compliance with our policy, facilitates this review by AV-Comparatives, an AMTSO-member tester.
Click to expand...

guest · Oct 26, 2022

VirusTotal += Bkav Pro
By Vicente Díaz - October 26, 2022

We welcome Bkav Pro Internet Security AI AV software by Bkav Corporation to VirusTotal. In their own words:

"Bkav is a leading technology corporation in Vietnam, which operates in cyber security, software, smartphone, smart home and AI camera. In Vietnam, Bkav is among the best-known brands and provides best services. The company is also famous around the world for identifying flaws in well-known products like Google Chrome, Face ID of iPhone X, Samsung Galaxy S8 iris recognition, etc. Bkav’s antivirus and mobile security software are present across the world with 86 million of downloads and more than 20 million of users in 234 countries and territories.

Bkav Pro Internet Security AI antivirus software is integrated with cloud computing technology and multi-layer protection to help protect users against all risks on the Internet, remove virus, spyware, protect users' data, bank accounts, etc.”
Click to expand...

guest · Jan 26, 2023

Mandiant's CAPA + GoReSym to reinforce VT's capabilities
By Vicente Díaz - January 26, 2023

VirusTotal, the world’s largest crowdsourced threat intelligence platform, is made possible thanks to a large community of security practitioners and vendors who integrate into our platform their best security tools. We are happy to announce the inclusion of two remarkable additions, both already having wide acceptance in the security community: Capa and GoReSym from Mandiant’s FLARE team.
Click to expand...

CAPA
Capa provides a human readable explanation of what a suspicious binary might do and describes the evidence that it found. This gives analysts a high level understanding without the need of going into time consuming Reverse Engineering. We now run Capa against all PE and ELF files submitted to VirusTotal and display the results under the behavior tab.
GoReSym
GoReSym is a very useful tool for analyzing Go samples, parsing the binary to extract all kinds of valuable metadata. Some of this information includes function names, the Go version used to compile a binary, compiler flags, and much more. The tool is designed to be resilient in the face of malformed binaries, such as those that result from manually unpacking malware samples.
Click to expand...

Brummelchen · Jan 26, 2023

this is _really_ nice. thanks

Log in or Sign up

VirusTotal is adding new threat detection capabilities

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Brummelchen Registered Member

Log in or Sign up

VirusTotal is adding new threat detection capabilities

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Brummelchen Registered Member

Useful Searches