This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

EndPoint Protection value / FinFisher own AV testings...

Hi all,

Did anyone saw this ?

https://wikileaks.org/spyfiles4/documents/Anti-Virus-Results-FinSpy-PC-4.51.xlsm

Its a little scary to say the least (and this all AV vendors confounded).
It also seems that the more Windows advance in time and versioning the more target-able it gets..

Let me know what you think.

Cheers,
m.

This thread was automatically locked due to age.

Parents

0 Sascha Paris over 10 years ago

Hi all,

Did anyone saw this ?

https://wikileaks.org/spyfiles4/documents/Anti-Virus-Results-FinSpy-PC-4.51.xlsm

Its a little scary to say the least (and this all AV vendors confounded).
It also seems that the more Windows advance in time and versioning the more target-able it gets..

Let me know what you think.

Cheers,
m.

As far as I can see, Sophos detects it ? So what's the question ?

FinFisher dummy infection file NOT DETECTED by most anti-virus companies - Kaspersky included! - Cyberwarzone
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Sascha Paris over 10 years ago

Hi all,

Did anyone saw this ?

https://wikileaks.org/spyfiles4/documents/Anti-Virus-Results-FinSpy-PC-4.51.xlsm

Its a little scary to say the least (and this all AV vendors confounded).
It also seems that the more Windows advance in time and versioning the more target-able it gets..

Let me know what you think.

Cheers,
m.

As far as I can see, Sophos detects it ? So what's the question ?

FinFisher dummy infection file NOT DETECTED by most anti-virus companies - Kaspersky included! - Cyberwarzone
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Mokaz over 10 years ago in reply to Sascha Paris

As far as I can see, Sophos detects it ? So what's the question ?

FinFisher dummy infection file NOT DETECTED by most anti-virus companies - Kaspersky included! - Cyberwarzone

Well, in the excel sheet linked above FF is a straight PASS and green all over sophos as well as almost everybody else in the AV industry... Check the attachment or the excel sheet itself.
- FF.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 JasonJoel over 10 years ago in reply to Mokaz

That spreadsheet is almost 6 months old, and doesn't even list which version of AV they used for the tests.

Newer tests, like the one linked above, show that Sophos does identify/catch the virus. So there is no issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 10 years ago in reply to JasonJoel

Moving to appropriate forum...

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

EndPoint Protection value / FinFisher own AV testings...

Submitted a Tech Support Case lately from the Support Portal?