Has anyone tested this ransomware simulator against SpyShelter?
https://www.softpedia.com/get/Security/Security-Related/RanSim.shtml
Has anyone tested this ransomware simulator against SpyShelter?
https://www.softpedia.com/get/Security/Security-Related/RanSim.shtml
To clarify, I know that SpyShelter isn’t specifically designed to protect against ransomware, but it would still be interesting to see if the behavior blocker (not the AV) would alert about certain behavior.
Did you test this yourself?
Anyway, i tried but can’t open the zip because it’s password protected…
Please try guys (if you are familiar with testing dangerous malware and have skills to do so safely)! Let us know your results, but it’s important you are a paid user and are set to the highest security level with SpyShelter, otherwise we may not block anything at all without our highest level of security. “Paranoid”
Hi Carl,
you are right to warn SpyShelter’s users but Ransim isn’t real malware, it’s a simulation test, as explained in Ransim official page, from the link posted above by RasheedHolland. I can’t test it because I don’t have SpyShelter 15, neither Free of Pro and, as far as I know, RasheedHolland has Windows 10 and SpyShelter 12 so he too can’t test it vs. SpyShelter 15
Anyway I can see that for downloading Ransim installer they ask personal datas: First Name*, Last Name*, Business Email*, Company Name*, Phone*, Country* and Number of Employees* so it seems oriented to companies rather than individuals.
“It will test 24 ransomware infection scenarios and 1 cryptomining infection scenario and show you if a workstation is vulnerable.
How RanSim works:
100% harmless simulation of real ransomware and cryptomining infections
Does not use any of your own files
Tests 25 types of infection scenarios
Just download the installer and run it
Results in a few minutes!
NOTE: Created for Windows-based workstations running Windows 10+. RanSim does not alter any existing files on disk. As part of the software, RanSim does enumerate all files on the local disk(s). For the purposes of encryption, simulated data files are downloaded from the Internet.
I’d guess it just won’t run at all then with SpyShelter in Paranoid mode, because it probably isn’t set up to get past any security software since it’s only a “test”.
It could be as you say for SpyShelter 15 but in Acronis webpage, posted above by Rasheed Holland, Ransim was tested vs Acronis Active Protection embedded in Acronis True Image 2017 New Generation and also vs a security software like Malwarebytes Premium.
Anyway it’s a simulation test so its results probably are less reliable than testing a cybersecurity software vs. real malware.
There are more ransomware simulators, but the same as the one RasheedHolland posted above, they all want registration.
I would like to test, but i don’t want to register…
I found this one on github: Releases · NextronSystems/ransomware-simulator · GitHub
I don’t know if it is any good, but at least no registration
AV is blocking it instantly, so it does something
can’t get past quarantine or delete, there is no option to allow somehow
Hello,
Ransim is also available on the popular website MajorGeeks. In my opinion MajorGeeks is reliable but the choice is yours of course, as it’s not the official Ransim website
Here it is the link:
Editor’s Note:
Password is knowbe4
I guess the password is for the ZIP file
On Ransim website is available a brief manual which explains how to conduct the simulation.
https://support.knowbe4.com/hc/en-us/articles/229040167-RanSim-Product-Manual
In particular:
So if you with to test SpyShelter 15 behavior vs. Ransim you should whitelist the above files on your antivirus.