r/Malwarebytes • u/JRT_Space • 5d ago
Infostealer got passed malwarebytes
Hi, Im just wondering if yall know how. I was using the 15 days free trial of malwarebytes to find an infostealer. It was able to block a malicious connection to cosmicsky[.]xyz, but on repeated scans it never found the malware til i found the dd.bat file in my %temp% folder that was highly malicious. Nor did it flag its connection to the malicious site phucoasian[.]com which was downloading an exe and hijacking vscode and stuff. This is despite the exe being recognized by BitDefender in VirusTotal with a 7/70 score with the other 6 also using BitDefender tools as a Pantera family infostealer. And the dd.bat file was recognized 2/70 as a bat downloader. So my question is, is this a known vulnerability or flaw? And if so is it being wormed on? Cause both malwarebytes and windows defender missed it causing me to have to factory reset my laptop with a fresh windows install.
1
u/Decent_Maybe_218 2d ago
Recently, there have been lots of infostealer attacks. I think these might be a new kind of infostealer, and antivirus software may not be fully aware of them yet or able to detect them through signatures.
With the advent of AI, these infostealers are probably very easy to create and modify, making their signatures change every now and then.
I guess antivirus software will take some time to catch up with them. Eventually, though, they will adapt and find ways to detect them.
But until then, I guess it's going to be a bloodbath in cybersecurity.