V
VirusTotal Blog
blog.virustotal.com · Company blog · on HN since 2012
The official blog of VirusTotal, a malware scanning service now owned by Google, covering product launches and threat research.
What HN saysHN links it for malware research, such as a post on malicious JAR files appended to signed MSI files, which commenters discuss in terms of signature trust.
15HN people shared it
1linked it in comments
15stories submitted
70story points
5 months agolast shared
2012people per year2026
Most-shared posts
- 1Google Acquires VirusTotal1 people · 47 points · first shared 2012 · 2 comments on HN
- 2Exploring the VirusTotal Dataset – Analyst's Guide to Effective Threat Research1 people · 5 points · first shared 2024 · discussion on HN
- 3VirusTotal adds support for analyzing EFI firmware files1 people · 3 points · first shared 2016 · discussion on HN
- 4VirusTotal unveils 'Droidy', an Android malware sandbox1 people · 2 points · first shared 2018 · 1 comments on HN
- 5VirusTotal’s first Ransomware Activity Report1 people · 2 points · first shared 2021 · 1 comments on HN
- 6Launching VirusTotal Monitor, a service to mitigate false positives1 people · 2 points · first shared 2018 · discussion on HN
- 7VirusTotal and= Crowdsourced AI1 people · 1 points · first shared 2023 · discussion on HN
- 8Deception at Scale: How Malware Abuses Trust1 people · 1 points · first shared 2022 · discussion on HN
- 9Crowdsourced AI and= Knostic1 people · 1 points · first shared 2026 · discussion on HN
- 10VirusTotal += Mac OS X execution1 people · 1 points · first shared 2015 · discussion on HN
- 11Of the WASP's nest: deep dive into PyPI-hosted malware1 people · 1 points · first shared 2023 · discussion on HN
- 12Distribution of malicious JAR appended to MSI files signed by third parties1 people · 1 points · first shared 2020 · discussion on HN
- 13Maintaining a healthy community1 people · 1 points · first shared 2016 · discussion on HN
- 14YARA beyond files: extending rules to network IoCs1 people · 1 points · first shared 2023 · discussion on HN
- 15Apology and Update on Recent Accidental Data Exposure1 people · 1 points · first shared 2023 · discussion on HN
What HN people wrote when they linked it
Xylakant · 2020-08-17
By “scanner” I meant the built-in windows defender tooling, which is - afair - affected. It trusts the signature. But you’re entirely correct - a virus scanner that does not rely on the signature w could catch the malicious code.
However, this blog post mentions that various security solutions trust the windows code signing, but it does not mention which ones - https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appe…