Silent, deadly and constantly evolving, ransomware is never far from the headlines. You might expect McAfee to want to boast about its McAfee Ransomware Interceptor, then, but instead it’s buried deep in the security company’s website.
The likely explanation is that Interceptor is a ‘pilot’, more of an experimental tool than a fully supported product. The website warns you that it might have issues, which could be a concern for a low-level tool with such an important task.
McAfee provides few details on how the program works, other than it “leverages heuristics and machine learning” to identify threats, rather than using simple signatures.
That sounds like the behaviour monitoring approach used by other tools, which in theory should allow the program to block even brand new threats. But a glance at the website shows this doesn’t always work, as for example McAfee had to issue an Interceptor update in May 2017 before the program would properly detect WannaCry.
No anti-ransomware tool offers a 100% guarantee, of course, and failing to detect one malware strain doesn’t tell us how Interceptor will perform against others. We would have to download and install the program to …read more
Source:: techradar.com – PC and Mac
Previous post
Next post