I didn’t know that Windows Defender essentially blocked the vulnerability.
I will also note that there can be situations when Windows Defender doesn’t work.
I got hit by a WinRAR zero day exploit (the archive was supposed to be just images) that installed master Monero minor that disabled Windows Defender and blocked installation of other tools. I was able to clean my computer, but I only found through a non-english site (and I happen to speak that language so it was easier to validate that it was legit).
For sure, I missed that (and the fact Valve seems to be deploying protections as well).
The commentary about Windows Defender was just a random remark in passing. I wasn’t expecting the WinRAR zero day to be addressed (it’s a zero day after all), but the malware itself (the Monero miner) was around for a while (current version at the time was at least a year old) and WD had zero protections against its methods (that did not use the WinRAR zero day, that was the entry point).
That being said, I do think this more of an edge case. WD works pretty well in my experience (especially for non-power users).
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]
No game suggestions, friend requests, surveys, or begging.
No Let’s Plays, streams, highlight reels/montages, random videos or shorts.
No off-topic posts/comments, within reason.
Use the original source, no clickbait titles, no duplicates.
(Submissions should be from the original source if possible, unless from paywalled or non-english sources.
If the title is clickbait or lacks context you may lightly edit the title.)
I didn’t know that Windows Defender essentially blocked the vulnerability.
I will also note that there can be situations when Windows Defender doesn’t work.
I got hit by a WinRAR zero day exploit (the archive was supposed to be just images) that installed master Monero minor that disabled Windows Defender and blocked installation of other tools. I was able to clean my computer, but I only found through a non-english site (and I happen to speak that language so it was easier to validate that it was legit).
Well yeah it’s a zero day, so not much an AV can do. I’m just quoting the article.
For sure, I missed that (and the fact Valve seems to be deploying protections as well).
The commentary about Windows Defender was just a random remark in passing. I wasn’t expecting the WinRAR zero day to be addressed (it’s a zero day after all), but the malware itself (the Monero miner) was around for a while (current version at the time was at least a year old) and WD had zero protections against its methods (that did not use the WinRAR zero day, that was the entry point).
That being said, I do think this more of an edge case. WD works pretty well in my experience (especially for non-power users).