News for hackers. Stuff that matters.

A comment on MalwareBazaar – Malware Sample Exchange.

Re:MalwareBazaar – Malware Sample Exchange by jusmakingapost on Wednesday September 23, 2020 @04:04PM (#24571325)
Why not use something like alienvault? What are the perks of using this over other services?
[ Parent | on HN ]
Re:MalwareBazaar – Malware Sample Exchange by capableweb on Wednesday September 23, 2020 @04:25PM (#24571567)
"AlienVault is Now AT&T Cybersecurity"

VS

Open, community oriented project with open API access and published archives from abuse.ch

[ Parent | on HN ]
Re:MalwareBazaar – Malware Sample Exchange by thomasdub on Wednesday September 23, 2020 @04:17PM (#24571471)
MalwareBazaar allows users to share live samples of indicators and not just hashes/metadata associated with them which threat Intel platforms like AlienVault do. There are several differences between the two but the biggest advantage (along with providing the actual malware to you) for MalwareBazaar is that it’s higher fidelity - you will get far fewer false positives as the barrier to entry is much higher. Nobody is going to label 8.8.8.8 as malicious which happens occasionally in AlienVault. As such this isn’t really a service, it’s more a way for the more advanced threat Intel analysts and reverse engineers to share data.
[ Parent | on HN ]