Jump to content

Would MBAE have prevented the WannaCry ransomware?


ikjadoon

Recommended Posts

I'm just curious. I didn't get infected (as I'm fully patched on Windows 10), but in the rogue chance that somehow a new WannaCry bypassed MS's March patches (or if an unpatched Windows 7 user was running MBAE)...would MBAE have prevented this ransomware?

Cool beans. Thanks; love the software.

Link to post
Share on other sites

Hello @ikjadoon:

In a word, yes -  and when MBAE is combined with Malwarebytes Anti-Ransomware (MBARW), the protections of course increase.  Better yet, if running MB3 Premium, where MBAE and MBARW are already rolled in as the full-time protections, AE Module and ARW Module, the presently known WannaCry variants are entirely thwarted with additional behavior based detections and defenses.  Thank you.

Link to post
Share on other sites

  • 2 weeks later...

Malwarebytes anti-exploit is a memory based protection. EternalBlue is a network based attack. Blocking the affected port using a firewall, or an Intrusion Detection System (IPS) (which is almost always running Snort) can stop this attack. Of course patching would completely stop the EternalBlue exploit, used by WannaCry completely.

Malwarebytes anti-ransomware,which is bundled into Malwarebytes 3.0 would also stop the ransomware infection; however, it would not stop a computer for from first being exploited.

This is why the NSA liked EternalBlue, without knowledge of the exploit, IPS is useless to stop this type of attack and Malwarebytes Anti-Exploit, HitmanPro.Alert, and EMET would be useless to stop it. Luckily IPS, such as that included in Symantec Endpoint, which Symantec took from Sygate when they purchased them, would protect users, as the Symantec's Endpoint firewall based on Sygate's firewall, includes Snort.

Malwarebytes anti-exploit on it's own will not stop WannaCry, unfortunately.

Link to post
Share on other sites

  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.