Author Topic: Poor phishing protection vs. Avast online security extension  (Read 1894 times)

0 Members and 1 Guest are viewing this topic.

Offline Evjls

  • Jr. Member
  • **
  • Posts: 96
Poor phishing protection vs. Avast online security extension
« on: January 23, 2018, 09:34:00 PM »
I saw avast has already implemented phishing protection in recent versions. However, although avast is fully updated, phishing protection database for the main program is still very poor and outdated compared to the browser extension

In my tests, using various live, confirmed phishing links in phishtank.com
- avast blocked only 1-2 links (default settings and update was performed before the test)
- avast online security extension blocked almost all of them, missed a few

this is my observation. Tell me your thoughts
thanks

REDACTED

  • Guest
Re: Poor phishing protection vs. Avast online security extension
« Reply #1 on: January 24, 2018, 02:25:26 PM »
Yes, I can confirm it.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48552
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Poor phishing protection vs. Avast online security extension
« Reply #2 on: January 24, 2018, 03:08:13 PM »
Yes, I can confirm it.
Confirm what ??? Which part isn't working well ???
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: Poor phishing protection vs. Avast online security extension
« Reply #3 on: January 24, 2018, 03:25:24 PM »
Quote
Confirm what ??? Which part isn't working well ???
Read the first post properly



Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48552
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Poor phishing protection vs. Avast online security extension
« Reply #4 on: January 24, 2018, 03:27:36 PM »
Quote
Confirm what ??? Which part isn't working well ???
Read the first post properly
Maybe you need to re-read my question. Which part is not working properly ???
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Poor phishing protection vs. Avast online security extension
« Reply #5 on: January 24, 2018, 03:32:40 PM »
Quote
Confirm what ??? Which part isn't working well ???
Read the first post properly
Agree, all info found in first post    ;)


Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48552
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Poor phishing protection vs. Avast online security extension
« Reply #6 on: January 24, 2018, 03:35:09 PM »
Quote
Confirm what ??? Which part isn't working well ???
Read the first post properly
Agree, all info found in first post    ;)
Which part of Avast is not working properly ???
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Evjls

  • Jr. Member
  • **
  • Posts: 96
Re: Poor phishing protection vs. Avast online security extension
« Reply #7 on: January 24, 2018, 03:47:01 PM »
Quote
Confirm what ??? Which part isn't working well ???
Read the first post properly
Agree, all info found in first post    ;)
Which part of Avast is not working properly ???
phishing protection in Web Shield. Its database is so outdated compared to Avast Online security extension

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48552
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Poor phishing protection vs. Avast online security extension
« Reply #8 on: January 24, 2018, 03:50:27 PM »
Thanks for the reply. Reported to Avast on the developers channel.
« Last Edit: January 24, 2018, 03:52:22 PM by bob3160 »
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Poor phishing protection vs. Avast online security extension
« Reply #9 on: January 25, 2018, 10:06:26 AM »
Hm... this is a fairly complicated issue.
It is somewhat true that (some of!) the antiphishing databases AOS uses use newer data. This is mostly due to 2 main reasons:
1. We tend to include only "used" phishing in our VPS. That means that if a phishing page was not visited within our userbase, we do not add it to VPS. Doing otherwise would cause our program to take up more space (both on drive and in memory) as well as take up more bandwidth (bigger streaming updates).
2. We tend to include only "verified" phishing in our VPS. We do not fear including potentially false positive URL in AOS (our browser plugin), because there are less things to break in case of a false positive (keeping in mind that the browser plugin can only interfere with browsing), but analysis takes time and until we are sure that it will not break anything when it will be scanned for in all your hard drive, memory and network, we do not want to add it to VPS.
If the phishing URL satisfies both points, there is a very stong likelyhood that it will be added to VPS (and, therefore, webshield).

Of course we are constantly making sure that there is as little delay as possible :)!