Morgado asked a question.
Hi Gonçalo
There are several application tags / prefixes.
The tags are:
These tags are added by our DIS team in front of the applications!
You can use these tags,e.g. to quickly filter out blacklisted applications.
Hi Detlev, how are u?
Yes, I understand that. But my question concerns on which base or source they are assuming certain App can be considered Malware.
Any clue on that?
Thanks.
Hi Gonçalo
Should an application be considered as game, malware, poker etc. solely depends on Snow analyst (SRS/DIS) research upon creating recognition for the particular app.
For example, for application to be considered as Malware we research if the executable is usually a victim of malicious code being inserted in it, and under what metadata and other circumstances (e.g. install path) these executables were reported as malware. Than we compare it with our data and create specific rules for them to categorize them with “Malware – “ prefix.
For games, fileshare, poker etc, is a bit easier since it’s not so hard to identify if the application/exe is part of the game. It’s basically thorough research we are doing before creating any of these.
Hi Gonçalo
Should an application be considered as game, malware, poker etc. solely depends on Snow analyst (SRS/DIS) research upon creating recognition for the particular app.
For example, for application to be considered as Malware we research if the executable is usually a victim of malicious code being inserted in it, and under what metadata and other circumstances (e.g. install path) these executables were reported as malware. Than we compare it with our data and create specific rules for them to categorize them with “Malware – “ prefix.
For games, fileshare, poker etc, is a bit easier since it’s not so hard to identify if the application/exe is part of the game. It’s basically thorough research we are doing before creating any of these.