# What new SpyShelter feature would you like to see?

**URL:** <https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188>\
**Category:** SpyShelter\
**Created:** [October 24, 2024, 3:09pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188 "2024-10-24T15:09:20Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [March 16, 2025, 11:07am UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/41 "2025-03-16T11:07:46Z")

</div>

> [@SpyShelterCarl](#):
>
> Thanks for sharing this. Very good points! I will see what we can do to improve our Infostealer protection.
> 
> It’s so interesting how these names/ideas change all the time. It was “spyware” and now it’s “infostealers”. But, I think maybe “infostealers” are unique compared to spyware, because it focuses on a specific task. Like the example you gave with the Bybit hack.

BTW, does SS protect against clipboard access? I wonder if this is still possible in Windows 11. Such a feature can protect against malware like MassJacker, see link. 🙂

> **[MassJacker malware uses 778,000 wallets to steal cryptocurrency](https://www.bleepingcomputer.com/news/security/massjacker-malware-uses-778-000-wallets-to-steal-cryptocurrency/)**
>
> A newly discovered clipboard hijacking operation dubbed 'MassJacker' uses at least 778,531 cryptocurrency wallet addresses to steal digital assets from compromised computers.

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [March 17, 2025, 9:59am UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/42 "2025-03-17T09:59:59Z")

</div>

> [@SpyShelterCarl](#):
>
> Would you say this is 100% browsers, or if not, what specific other apps? From what I read it seems to be browsers/cookies. Am I mistaken? If they stole info from a password manager, it seems the data would be encrypted so they couldn’t get it? Maybe I’m wrong though?

Here is another example of an infostealer that targets password managers. I noticed that this one is targeting browser extensions of password managers. So that’s another way how they try to intercept passwords. 🙂

> **[Luca Stealer Targets Password Managers and Cryptocurrency Wallets](https://blogs.blackberry.com/en/2022/08/luca-stealer-targets-password-managers-and-cryptocurrency-wallets)**
>
> Luca Stealer contains much of the functionality expected from a typical infostealer, with an added focus on crypto-wallets and password management software. This malware is likely to continue to see a steady rise in use, as more and more threat...

---

<div class="post-metadata">

**Author:** ![SpyShelterCarl](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/spysheltercarl/32/7_2.png) [@SpyShelterCarl](https://forum.spyshelter.com/u/SpyShelterCarl)\
**Post date:** [March 17, 2025, 3:19pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/43 "2025-03-17T15:19:46Z")

</div>

> [@RasheedHolland](#):
>
> BTW, does SS protect against clipboard access? I wonder if this is still possible in Windows 11. Such a feature can protect against malware like MassJacker, see link.

We are finding we can’t do this anymore, but if you find otherwise please post the details.

---

<div class="post-metadata">

**Author:** ![SpyShelterCarl](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/spysheltercarl/32/7_2.png) [@SpyShelterCarl](https://forum.spyshelter.com/u/SpyShelterCarl)\
**Post date:** [March 17, 2025, 3:21pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/44 "2025-03-17T15:21:30Z")

</div>

> [@RasheedHolland](#):
>
> Here is another example of an infostealer that targets password managers. I noticed that this one is targeting browser extensions of password managers. So that’s another way how they try to intercept passwords.

Ah, interesting! The reason I asked this question is because we are considering focusing on browser plugin protection as a new feature where you can allow/deny any new plugin. We thought it might help with this issue too.

I read your other comment/post here too, thank you!

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [March 17, 2025, 3:45pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/45 "2025-03-17T15:45:39Z")

</div>

> [@SpyShelterCarl](#):
>
> Ah, interesting! The reason I asked this question is because we are considering focusing on browser plugin protection as a new feature where you can allow/deny any new plugin. We thought it might help with this issue too.

This sounds like an interesting feature that is not offered by many tools. Some malware may indeed install malicious extensions.

But it wouldn’t protect against infostealers who simply try to access data from targeted apps, obviously. And I assume that malicious extensions that are added silently to the browser, can always been seen via the browser’s extension manager, but I’m not sure about that. 🙂

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [March 17, 2025, 3:51pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/46 "2025-03-17T15:51:33Z")

</div>

> [@SpyShelterCarl](#):
>
> We are finding we can’t do this anymore, but if you find otherwise please post the details.

OK, that would be a bummer. I did read about a feature that has been added in Opera years ago, that tries to protect against malware. So I assume there still must be a way to monitor the clipboard, unless it can only be done by the app itself. 🙂

> **[Opera browser working on clipboard anti-hijacking feature](https://www.bleepingcomputer.com/news/security/opera-browser-working-on-clipboard-anti-hijacking-feature/)**
>
> The Opera browser team is working on a new clipboard monitoring and protection system called Paste Protection, which aims to prevent content hijacking and snooping.

---

<div class="post-metadata">

**Author:** ![Kaliban](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/kaliban/32/29_2.png) [@Kaliban](https://forum.spyshelter.com/u/Kaliban)\
**Post date:** [March 17, 2025, 4:53pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/47 "2025-03-17T16:53:14Z")

</div>

Here it is a recent article about Clipboard Protection [Gen Blogs | Clipboard Protection: Our Latest Defense Against Evolving Threats](https://www.gendigital.com/blog/news/family-of-brands/clipboard-protection)  
Their technology is integrated in Norton, Avast and AVG AV’s. Another software which has a similar feature is Adlice Protect Premium (formerly RogueKiller Anti-Malware) [Free Virus Cleaner | RogueKiller AntiMalware • Adlice Software](https://www.adlice.com/roguekiller/)

---

<div class="post-metadata">

**Author:** ![Kaliban](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/kaliban/32/29_2.png) [@Kaliban](https://forum.spyshelter.com/u/Kaliban)\
**Post date:** [March 17, 2025, 5:05pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/48 "2025-03-17T17:05:10Z")

</div>

Here it is an article “Clipboard Hijacking and How to Prevent It” [https://layerlogix.com/clipboard-hijacking-and-how-to-prevent-it/](https://layerlogix.com/clipboard-hijacking-and-how-to-prevent-it/)

---

<div class="post-metadata">

**Author:** ![SpyShelterCarl](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/spysheltercarl/32/7_2.png) [@SpyShelterCarl](https://forum.spyshelter.com/u/SpyShelterCarl)\
**Post date:** [March 17, 2025, 6:07pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/49 "2025-03-17T18:07:04Z")

</div>

I will share these with our team. Thanks @Kaliban and @RasheedHolland. Hopefully these articles are still current with modern Windows 11.

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [March 18, 2025, 12:56pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/50 "2025-03-18T12:56:59Z")

</div>

> [@Kaliban](#):
>
> Here it is a recent article about Clipboard Protection [Gen Blogs | Clipboard Protection: Our Latest Defense Against Evolving Threats](https://www.gendigital.com/blog/news/family-of-brands/clipboard-protection)  
> Their technology is integrated in Norton, Avast and AVG AV’s.

I forgot about that so called ‘‘safe browsers’’ can also block clipboard loggers. I’m not sure how this is done, probably by virtualization.

---

<div class="post-metadata">

**Author:** ![SpyShelterCarl](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/spysheltercarl/32/7_2.png) [@SpyShelterCarl](https://forum.spyshelter.com/u/SpyShelterCarl)\
**Post date:** [March 19, 2025, 9:30pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/51 "2025-03-19T21:30:12Z")

</div>

Very useful, thanks! I wonder how much resource usage that requires though… hopefully it’s reasonable.

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [March 20, 2025, 11:49am UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/52 "2025-03-20T11:49:51Z")

</div>

> [@SpyShelterCarl](#):
>
> Very useful, thanks! I wonder how much resource usage that requires though… hopefully it’s reasonable.

That’s the thing, it’s not clear if they simply block access to some clipboard API, or if they use virtualization or if they block interprocess communication. You might want to take a look at this ‘‘online banking’’ test. Some AV’s passed the test and some failed to protect the clipboard.

> **[Analysis Of Modules For Protection Of Online Banking And Payments » AVLab...](https://avlab.pl/en/analysis-of-modules-for-protection-of-online-banking-and-payments/)**
>
> Is your antivirus protect banking and payment online session? We have published security test about banking mode in modern antivirus solutions.

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [March 20, 2025, 11:55am UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/53 "2025-03-20T11:55:37Z")

</div>

> [@SpyShelterCarl](#):
>
> Ah, interesting! The reason I asked this question is because we are considering focusing on browser plugin protection as a new feature where you can allow/deny any new plugin. We thought it might help with this issue too.

BTW, I forgot that SS 15 also doesn’t offer one of the most interesting features of SS 12, and that is protection against banking trojans. This feature is still being offered by tools like HitmanPro.Alert and G DATA Internet Security. They basically monitor browser memory for modification, see link. SS Classic did the same.

> **[Internet Security – strong online protection for all of your devices](https://www.gdatasoftware.com/internet-security#feature-bankguard)**
>
> Award-winning online security ✓ Strong firewall ✓ G DATA Internet Security 2022: learn more now!

---

<div class="post-metadata">

**Author:** ![SpyShelterCarl](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/spysheltercarl/32/7_2.png) [@SpyShelterCarl](https://forum.spyshelter.com/u/SpyShelterCarl)\
**Post date:** [March 23, 2025, 3:51pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/54 "2025-03-23T15:51:00Z")

</div>

> [@RasheedHolland](#):
>
> BTW, I forgot that SS 15 also doesn’t offer one of the most interesting features of SS 12, and that is protection against banking trojans. This feature is still being offered by tools like HitmanPro.Alert and G DATA Internet Security. They basically monitor browser memory for modification, see link. SS Classic did the same.

Very useful, I will share this with the team!

I wonder if we can still do this with the latest Windows versions without triggering Windows Security, etc…

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [September 25, 2025, 10:48am UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/55 "2025-09-25T10:48:45Z")

</div>

> [@SpyShelterCarl](#):
>
> Thanks for sharing this. Very good points! I will see what we can do to improve our Infostealer protection.

BTW, there is currently another new HIPS on the market that offers a lot of stuff that SpyShelter 15 is currently lacking. I won’t name it, because it’s not political correct, but I can DM you, if you’re interested. The reason why I mention this, is because it will hopefully motivate you guys to improve SS 15. With that I mean, I would like to see more behavioral monitoring besides visibility features. 🙂

---

<div class="post-metadata">

**Author:** ![SpyShelterCarl](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/spysheltercarl/32/7_2.png) [@SpyShelterCarl](https://forum.spyshelter.com/u/SpyShelterCarl)\
**Post date:** [September 25, 2025, 11:18am UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/56 "2025-09-25T11:18:02Z")

</div>

Yes, please message me, thank you!

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [September 26, 2025, 2:08pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/57 "2025-09-26T14:08:47Z")

</div>

> [@SpyShelterCarl](#):
>
> Yes, please message me, thank you!

I have send you a DM. 😉

---

<div class="post-metadata">

**Author:** ![SpyShelterCarl](https://forum.spyshelter.com/user_avatar/forum.spyshelter.com/spysheltercarl/32/7_2.png) [@SpyShelterCarl](https://forum.spyshelter.com/u/SpyShelterCarl)\
**Post date:** [September 26, 2025, 3:58pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/58 "2025-09-26T15:58:34Z")

</div>

Received, thanks!!! We will check it out.

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [May 26, 2026, 1:13pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/59 "2026-05-26T13:13:45Z")

</div>

> [@SpyShelterCarl](#):
>
> Received, thanks!!! We will check it out.

BTW, I wondered if you guys can offer a new feature where apps can only access certain folders, while they are blocked from accessing ALL other folders?

So for examle, Firefox.exe is allowed to access the Downloads and/or Documents folder, but can not access ALL other folders. That would be a feature unique to SS 15, because none of the file/folder protection tools are offering this at the moment. 🙂

---

<div class="post-metadata">

**Author:** ![RasheedHolland](https://forum.spyshelter.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@RasheedHolland](https://forum.spyshelter.com/u/RasheedHolland)\
**Post date:** [May 26, 2026, 1:15pm UTC](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188/60 "2026-05-26T13:15:55Z")

</div>

> [@SpyShelterCarl](#):
>
> Received, thanks!!! We will check it out.

BTW, iDefender turned out to be a bit of a disappointment, the developer has got a different view on how to build behavior blockers. It monitors quite a lot, but is too complex, it should be simplified, but in a way that users can actually configure it in an easy way.

[Previous page](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188.md?page=2)

[Next page](https://forum.spyshelter.com/t/what-new-spyshelter-feature-would-you-like-to-see/188.md?page=4)
