Malwarebytes suggestions. Implement these, they will increase protection

[rbsuoyfebvrufyvweyvf]

Hello Malwarebytes staff,

I am wondering about Malwarebytes' script protection. I have a few questions:

1. The newly added script protection and fileless attack features, how does it work?

2. Adding a behaviour blocker? This would be very useful and everyone I know believes Malwarebytes needs a behaviour blocker.

3. Adding a command line-script scanner like Bitdefender. I think it's very useful, and it certainly would improve script protection and fileless attack protection. It would work by scanning the command line of newly launched apps.

Kind Regards,

Malwarebytes user

 

[rbsuoyfebvrufyvweyvf]

@AdvancedSetup, @miekiemoes, @David H. Lipman, @jtodd234

This is very important and requires immediate attention. Sorry for being rude but it's true. I know Malwarebytes is a good product, it has potential. I have seen firsthand how good the product is. However, it is lacking with detecting scripts and fileless attacks. I believe all of Malwarebytes needs to do more to more to stop these threats. As I have said, Malwarebytes has lots of potential, but you guys need to do more to protect against fileless attacks. You guys also owe everyone an explanation of your new feature that claims to improve detection of fileless attacks and malicious scripts. Thank you once again.

[rbsuoyfebvrufyvweyvf]

Does anyone even read these? I feel like I'm being ignored.

[rbsuoyfebvrufyvweyvf]

Could I please have an explanation about the 'new' feature that the Malwarebytes devs added for script protection? I want to know how it works.

[AdvancedSetup]

Thank you for your feedback and we truly value feedback coming from our passionate customers.  

We have implemented some of the suggestions that you have mentioned and continuously enhance them not only to address newer threats, but also through detections as we see these threats evolve.  Below is some information on your suggestions, how we have implemented them, and how we continuously add detections for them.

 

1. The Fileless and Script detection technology is a combination of adapting the AMSI integration and adjusting our detection capabilities to handle this integration to better protect users from scripts and fileless threats before they execute.
2. We do have our Anti-Exploit and Anti-Ransomware technologies that use behavior to trigger analysis, scanning and/or detection.
3. Aside from enhancing our script detection, we are also enhancing the detections for command line execution which has been implemented for quite some time now.  We continue to enhance it and add detections for relevant threats that use command line.

 

[rbsuoyfebvrufyvweyvf]

I really like the work that you people are doing. Thank you for the explanation on the script protection. However, it is not as effective as Bitdefender, Kaspersky or even Windows Defender's script protection. Malwarebytes has great non-script detection, the best I've seen. However, it is still a bit lacking. I understand you guys try your best, and I am thankful for that. I know Malwarebytes is going in the right direction, but maybe you guys could spend some more time on your script protection. Even if you guys add a script protection category in the Exploit protection advanced settings, that would be wonderful. You guys could add new detection technology to that section as well. I think it would be amazing. Exploit protection is behaviour-based, and that's exactly what you need for scripts. Thank you for taking the time to reply to me. I really appreciate it.