Author Topic: Vault 7 wikileaks docs hint cia could bypass 21 security products(Avast and AVG)  (Read 4962 times)

0 Members and 1 Guest are viewing this topic.

Offline Be Secure

  • Long Time Avast User(10years.....) Security Enthusiast.
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1908
The list covers almost all major antivirus vendors, including Comodo, Avast, Kaspersky, AVG, ESET, Symantec, and others.
Bypass and exploit techniques were only listed for three vendors: F-Secure, Avira, and AVG (partial info).
https://www.bleepingcomputer.com/news/security/vault-7-wikileaks-docs-hint-cia-could-bypass-21-security-products/
PC- Windows10 EDU 64Bit,avast! free 21.1.2449,uBlock Origin,NVT_OSA,GoogleChrome(64bit),CCleaner,Unchecky,ZAM Free,Shadow Defender.
Security Enthusiast

Offline TrueIndian

  • Poster
  • *
  • Posts: 433
The list covers almost all major antivirus vendors, including Comodo, Avast, Kaspersky, AVG, ESET, Symantec, and others.
Bypass and exploit techniques were only listed for three vendors: F-Secure, Avira, and AVG (partial info).
https://www.bleepingcomputer.com/news/security/vault-7-wikileaks-docs-hint-cia-could-bypass-21-security-products/

I have read everything about the leaks and they yet haven't mentioned any holes in avast as such.

And if you dig a bit you will find lot av vendors saying the holes were minor and some were years old.

Anyway Vlk (CTO) has explained it:
https://www.google.co.in/amp/sanfrancisco.cbslocal.com/2017/03/08/wikileaks-cia-documents-antivirus-software-reviews/amp/
« Last Edit: March 09, 2017, 12:10:50 PM by TrueIndian »

REDACTED

  • Guest
yea . i found other security forum also discuss this hot topic

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
I've read several of those articles at Wikileaks and only things I've seen are 2 year and older things that do not apply anymore.

REDACTED

  • Guest
I've read several of those articles at Wikileaks and only things I've seen are 2 year and older things that do not apply anymore.

Two years from now you will read about today's vulnerabilities being exploited!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48551
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
I've read several of those articles at Wikileaks and only things I've seen are 2 year and older things that do not apply anymore.

Two years from now you will read about today's vulnerabilities being exploited!
So in 2 years we'll find out who's right. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Chim

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1151
Two years from now you will read about today's vulnerabilities being exploited!
Exactly.  Just because those OLD vulnerabilities in question have by now been fixed, it doesn't mean new ones don't exist.  In fact, it's pretty much a certainty that they do.

For example ... Right now regular people, as evidenced by the discussions here in these forums, are finding a myriad of bugs in the current avast version --- avast 17.  Just imagine what a CIA could do!   :o
Dell Optiplex 780 / Core 2 Duo E8400 3.00 GHz / 4 Gig RAM / Windows XP Pro 32-Bit SP3 / Panda Dome  Free 18.07.00 / MBAM / SAS / NetZero Dial Up / Maxthon MX5 5.2.5.4000

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48551
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Two years from now you will read about today's vulnerabilities being exploited!
Exactly.  Just because those OLD vulnerabilities in question have by now been fixed, it doesn't mean new ones don't exist.  In fact, it's pretty much a certainty that they do.

For example ... Right now regular people, as evidenced by the discussions here in these forums, are finding a myriad of bugs in the current avast version --- avast 17.  Just imagine what a CIA could do!   :o
Do about what ??? There first needs to be something that makes you vulnerable.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline =Snake=

  • Still using Avast Free!
  • Maybe Bot
  • ***
  • Posts: 17412
Two years from now you will read about today's vulnerabilities being exploited!
Exactly.  Just because those OLD vulnerabilities in question have by now been fixed, it doesn't mean new ones don't exist.  In fact, it's pretty much a certainty that they do.

For example ... Right now regular people, as evidenced by the discussions here in these forums, are finding a myriad of bugs in the current avast version --- avast 17.  Just imagine what a CIA could do!   :o
Do about what ??? There first needs to be something that makes you vulnerable.
And who really means, that they are better than we are?
Desktops: AMD LE1620, W7 ult SP1 [x86] | IP-4, XP pro SP3[x86] | Intel Celeron, W7 ult SP1 [x86] | AMD-Athlon 1800+, XP pro SP3, [x86] in WL |
Laptops:   HP G72 , W10 Home [x64]  v22H2 (Build 19045.2728) | Acer Aspire ES1-131, W10 Home [x64] v1511 (Build 10586.1106)|
Firefox ESR [AOS,NS,uBO,uMatrix],Thunderbird,MCShield,CCleaner,Defraggler,MBAM Free,MBAE, Avast Free Antivirus|

Offline TrueIndian

  • Poster
  • *
  • Posts: 433
To be more accurate,the bugs reported to the forum are in regards to stability and other non-security related.

The bugs that CIA reports are old and need additional work to make them usable.Many antivirus firms dismissed the bugs by saying they were fixed long ago and the vulnerability was found in AVG not in avast and vlk already mentioned that it is not something that is major and would need additional work to get around AVG.But that wouldn't be a issue considering the current state of AVG operations.  :)

Offline Chim

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1151
Do about what ??? There first needs to be something that makes you vulnerable.
My thinking / wondering out loud angle is:  If there are this many bugs with seemingly regular aspects, or as TrueIndian put it, "stability and other non-security related" areas of avast, why would it be incomprehensible to accept the possibility that there can be vulnerabilities hidden away in some deep areas of avast and that as of yet, no one from avast and no one who frequents tech forums has happened upon them?

Example #1:  If say a software like Windows (ALL versions to date) could somehow be designed and developed to where now it was possible to make it be absolutely 100% SAFE today and from this point on, there would have never been the need for the perennial Update Tuesday.  True, not all updates are to fix vulnerabilities, but many are.

Example #2:  Say you have hired a contractor to build you a house.  You periodically go check out their work progress.  Say you see various cases of unsatisfactory workmanship in areas that are easily obvious.  Wouldn't it make you wonder what workmanship is hidden behind the sheetrock in the walls and under the floor concrete, etc.?  Just because we can't see a problem, it doesn't mean it isn't there.

Example #3:  Say your vehicle had some serious issue that necessitated a recall campaign to fix it 2 years ago.  Just because that was an "old" issue and was fixed by the recall, that does not mean there cannot be another serious issue pop up that requires another recall next month or next year or in 2 years.  Maybe even various more issues necessitating recalls.

Anyway, don't worry.  I like avast.  I'm very happy with it.  :)  We can't ignore though that it's been said on these very forums time and again, " No anti-virus can find ALL malware."
« Last Edit: March 12, 2017, 03:05:04 AM by Chim »
Dell Optiplex 780 / Core 2 Duo E8400 3.00 GHz / 4 Gig RAM / Windows XP Pro 32-Bit SP3 / Panda Dome  Free 18.07.00 / MBAM / SAS / NetZero Dial Up / Maxthon MX5 5.2.5.4000

Offline Chim

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1151
And who really means, that they are better than we are?
We might not know for a fact that the CIA is better than the avast Devs ... but we don't know for a fact that they aren't either.

And NOTHING is to say that the info that was leaked on WikiLeaks is complete as to what ALL they know about how to get around all the various anti-viruses.  It could very well be just sample tidbits.

Heck, it could all be misdirection.

Anyway, that said, avast is great.  I'm not gonna freak out by the WikiLeaks info and go searching for some other anti-virus.
Dell Optiplex 780 / Core 2 Duo E8400 3.00 GHz / 4 Gig RAM / Windows XP Pro 32-Bit SP3 / Panda Dome  Free 18.07.00 / MBAM / SAS / NetZero Dial Up / Maxthon MX5 5.2.5.4000

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
They don't say which versions. They might as well be talking about versions prior Behavior Shield, DeepScreen and avast!'s cloud. Because with all this, whatever they use, it'll eventually come in front of a malware analyst. Or it'll just be captured by the system automatically.
Visit my webpage Angry Sheep Blog

Offline Be Secure

  • Long Time Avast User(10years.....) Security Enthusiast.
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1908
PC- Windows10 EDU 64Bit,avast! free 21.1.2449,uBlock Origin,NVT_OSA,GoogleChrome(64bit),CCleaner,Unchecky,ZAM Free,Shadow Defender.
Security Enthusiast