their antivirus pattern?
Got a mail today with a malicios msg file: https://www.virustotal.com/gui/file/38c251914043a3bab9ce8ee1dfe282681a02a330c4fde38db6fa23a08b0dd172/detection
Uploaded on friday apricl 14th at 13.00 german local time. Right now only 5 out of 60 are detecting the malicios attachment…
Interesting: This file was sent to us at 12.35 german local time… Avast did not detect it…
Now I see Hub Mails from our exchange where the exchange plugin/shield blocked the MSG which is still/again called Rechnung_641175.msg…
Yet Virus total does not detect it… probably because virus total didn’t got an update yet?
And now file shield is also detecting this MSG!!!
So the result is: Avast has updated their AV signatures within less than an hour!
God work!!!
P.S. Seems to be a phishing mail wave targeting germany… got Hub mails for to diffrent customers as well.
You can visit C:\Program Files\AVAST Software\Avast\defs and see how many streaming updates Avast send you on an hour.
I think that streaming updates is one of the best things that AVAST has.
Quite interesting!: Virus Total still sees Avast not been able to detect these file as malicios…
Meanwhile several mails where intercepted by the exchange shield!