Malwarebytes: Test vs Ransomware | Summary and Q&A

TL;DR

Malwarebytes Premium is tested against various ransomware samples, demonstrating high proactive detection rates and effective protection against encryption, with a few exceptions.

Key Insights

• ☠️ Malwarebytes Premium has a high proactive detection rate of 98.53% against known ransomware samples.
• 👻 Malwarebytes effectively protects files from encryption in most cases, but it allows the deletion of shadow copies and encryption by the Ryuk ransomware.
• 💦 Ransomware protection module of Malwarebytes can work independently of the malware protection module but is not foolproof.
• ❓ Malwarebytes can be bypassed by specific ransomware samples, like Ryuk, by terminating the software itself.
• 👤 Network locations are not scanned by the real-time protection of Malwarebytes, which can be an issue for users using network folders.
• 👊 Malwarebytes demonstrates effective blocking of the method of execution of ransomware attacks but is less effective in blocking the final encryption behavior.
• ❓ Malwarebytes offers a tamper protection feature to prevent the termination of the software, but it may not be effective against all ransomware samples.
• ☠️ The overall block rate of Malwarebytes' behavioral protection against a custom ransomware attack script was 53.85%.

Transcript

hello and welcome to the pc security channel in this video we will be testing malwarebytes premium against some of the most infamous ransomware from the last five years all of these samples will be executed on this test system we're going to see if malwarebytes can protect us and more importantly if it can protect our files so we have some sample d... Read More

Questions & Answers

Q: How did Malwarebytes perform in the test against ransomware?

Malwarebytes detected and blocked the majority of ransomware samples, with a proactive detection rate of 98.53%. However, it missed one detection, allowing Op Article 13 to execute.

Q: Did Malwarebytes successfully protect files from encryption?

Yes, Malwarebytes successfully protected the files from encryption in most cases. However, in some cases, it allowed the deletion of shadow copies and the encryption of files by Ryuk ransomware.

Q: How does Malwarebytes protect against ransomware?

Malwarebytes uses a combination of signatures, heuristics, and machine learning to detect and block ransomware. It also has specialized modules, such as ransomware protection, to prevent encryption.

Q: Can Malwarebytes be bypassed by certain ransomware samples?

While Malwarebytes offers strong protection against ransomware, some samples, like Ryuk, can bypass its defenses by terminating the Malwarebytes software itself.

Summary & Key Takeaways

• Malwarebytes Premium is tested against a variety of ransomware samples, including Op Article 13 and Ryuk.

• The proactive detection rate of Malwarebytes Premium is 98.53%, with only one missed detection.

• While Malwarebytes effectively blocks most ransomware attacks, it allows the deletion of shadow copies and encryption of files in some cases.