News for hackers. Stuff that matters.

A comment on 2FA app with 10k Google Play downloads loaded well-known banking trojan. Parent comment

Re:2FA app with 10k Google Play downloads loaded well-known ... by devwastaken on Friday January 28, 2022 @02:31PM (#30119247)
Anti-virus is a scam. Same as anti cheat and DRM. It's a bandaid that only works for already known and databased attacks. You can simply modify how the virus is packaged and have it no longer detected.

The true solution really is app review in the case of mobile apps. Google has the power and money, they just don't care.

[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by hericium on Friday January 28, 2022 @02:54PM (#30119510)
> Anti-virus is a scam.

Most of the commercial industry is, but don't forget about ClamAV[1] and other open-source projects.

[1] https://www.clamav.net/

[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by Avamander on Saturday January 29, 2022 @05:51AM (#30125386)
ClamAV has one of the worst detection rates, even for ancient shit. Other vendors' Yara rules tend to be better.
[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by hericium on Saturday January 29, 2022 @12:07PM (#30128006)
It's an engine pluggable with 3rd party signatures if one doesn't like default ones.

I wasn't attempting to discuss its quality but oppose slapping "scam" label on every AV there is.

[ Parent | on HN ]