AV products are NOT all the same

I read an interesting article recently on the cost of anti-virus products. The article considers the increasing cost of some anti-virus products, as vendors try to steer users towards product suites that include not just anti-virus, but also personal firewall, anti-spam and IDS. The article concludes with the message that users should shop around and not allow themselves to be pressured into buying a suite from a single vendor.

It’s hard to argue with that: it makes perfect sense. However, it’s a shame that price and brand recognition are considered here to be the only criteria. As if all other things are equal. Sadly they’re not. What about a product’s ability to protect you from attack? Isn’t this a key factor in deciding which product to use?

It’s true that it’s not always easy for customers to determine which product is best, but that’s not to say that it doesn’t matter. And a vendor’s track record in a range of independent tests is always a good guideline when looking at a product’s performance. There’s a paper in the ‘Publications’ section of the ESAC [European Scientific Antivirus Centre] web site if you’re interested in further information.

Shop around? Definitely. But remember that cost isn’t the only factor and don’t let poor detection be the price you pay for selecting a cheaper product.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.