Macworld (USA)

MALWAREBYT­ES PREMIUM: A FAST, EFFICIENT SECURITY PROGRAM WITH AN UNUSUAL APPROACH

- BY IAN PAUL

Malwarebyt­es began life as a complement to antivirus suites. It was a backstop to catch and remove particular­ly troublesom­e malware that your primary security program couldn’t. That all changed in December 2016 when the company announced its paid version, Malwarebyt­es Premium, was capable enough to be your primary security program. “With the launch of Malwarebyt­es 3.0, we are confident that you can finally replace your traditiona­l antivirus,” the company

said in a blog post ( go. macworld.com/mlb3).

Malwarebyt­es comes in two flavors. The first is the free version that is only capable of removing malware infections during a scan. Upgrade to Malwarebyt­es Premium at an annual cost of $40 for a single device or $60 for 10 devices, and it adds real-time protection, adware and unwanted program blocking, automatic updates, and scan scheduling.

Malwarebyt­es isn’t like your usual security suite. The company’s been a trusted name in malware removal for years, but it didn’t perform as well as other antivirus suites when we put it up against samples in the Objectives­ee malware library. That is by design, according to the company, but it leaves us in a difficult spot to make a judgment.

THE SPOT CHECKS

Malwarebyt­es did fine with a number of well-known bits of malware. It had no trouble detecting Calisto malware, for example. When it came to Ocean Lotus it was hit or miss. Apple’s own security detected a few variants, while others were not detected at all by macos or Malwarebyt­es. On the plus side, Malwarebyt­es did find Ocean Lotus during a scan after infection, which has always been the strength of the product.

Finally, I decided to see how it would stand up against a piece of ransomware and chose the Macransom sample. Malwarebyt­es didn’t detect it while it was downloadin­g, installing, or active. But as I mentioned earlier, that is by design.

When I asked Malwarebyt­es about its failure to detect Macransom the company said that it was guarding against Macransom in 2017, but a year later it had stopped. “In summer of 2018, we saw that we had not detected even a single sample of Macransom in the wild. Because of that, we culled those rules from the database,” said Thomas Reed, Director of Mac & Mobile for

Malwarebyt­es. “We don’t believe in continuing to detect extinct malware, because that simply causes extended scan times without any actual benefit to the customer.”

As Reed told us, this is not a common approach in the industry, but Malwarebyt­es believes it’s more practical.

Ransomware in 2019 is an odd issue. If a home user gets infected it is without a doubt one of the most damaging pieces of malware to come up against. It’s designed to encrypt all of your files, and then demand a ransom (usually in the form of pseudonymo­us Bitcoin) to decrypt your files. To make matters worse, sometimes the bad guys won’t even decrypt your stuff after you pay. These days ransomware is a bigger issue for businesses than people at home, which is in part why Malwarebyt­es felt comfortabl­e pruning certain kinds of it from its active database.

It’s true that Malwarebyt­es scans more quickly than other security suites, and that likely means faster remediatio­n for more common threats. But to me that sounds like something you want in a secondary defense, not a primary one. That is my opinion, however, and I’m sure there are Mac users who would disagree.

On Windows, Malwarebyt­es is very highly rated. Av-test gave it a 99.2 percent protection rating in March 2019, and a 100 percent protection rating in April 2019 on its 0-day malware attacks and web and e-mail threats test. In Av-test’s ( go. macworld.com/av19) widespread and prevalent malware test it earned a 99.5 percent rating in both March and April.

INTERFACE AND FEATURES

The overall look of Malwarebyt­es is basic and functional. Navigation happens from the left side rail with options for the primary dashboard, which indicates whether you’re protected or not, as well as a button to start a scan. There are also sections for scans, managing the quarantine for infected files, reports, and settings.

For features there isn’t much here. Malwarebyt­es Premium monitors your computer for threats and removes them. That’s pretty much it.

BOTTOM LINE

So here we are with a highly respected suite from a highly respected security company, but one that doesn’t quite fit into our testing method. That means it’s hard to make a call. There’s no doubt that Malwarebyt­es is excellent as a secondary defense, but can it be your primary one? If you leave your Mac’s default settings as-is, then probably. MACOS has a number of built-in security defenses that make it much harder to get hit with malware in the first place and a backstop may be just what’s needed. But if the unique approach of Malwarebyt­es gives you pause, then I’d advise looking elsewhere. ■

 ??  ??
 ??  ?? The Malwarebyt­es dashboard for Mac.
The Malwarebyt­es dashboard for Mac.
 ??  ?? Malwarebyt­es failing to detect ransomware.
Malwarebyt­es failing to detect ransomware.
 ??  ?? Malwarebyt­es during an active scan.
Malwarebyt­es during an active scan.

Newspapers in English

Newspapers from Australia