Virustotal Premium allows downloading files and "hunting" - which involves writing YARA rules to match the files from everything that has been uploaded to VT e. I can search for files that have a string "private", get alerted every time such file is uploaded to VT and download them myself.
Having the Premium service is very common for security teams and companies. Also as already mentioned, the information is shared with other communities. So if there's a risk that private documents could be uploaded, I wouldn't implement this feature. First, read this article thoroughly: Security Firm Accused of Exposing Terabytes of Customer Data , it tells you why you should not make the same mistake.
The rule of thumb of using VirusTotal to protect own file privacy is to send a sha hash to the database. Also, one should subscribe to prominent antivirus "business edition" that will scan the file using localized virus scanning engine. Everyone on the route can see it.
If it's not encrypted they can read it. If it is encrypted they might be able to decrypt it. If VT has a rogue employee or they get hacked then your Data can be exposed.
Never let private information go out if you want to keep it to yourself. Similarly don't put anything on your Phone, take it somewhere expecting not to lose it, and then lose it and all your Passwords, Photos, Banking Info, etc.
Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. Ask Question. Asked 4 years, 3 months ago. Active 3 years, 9 months ago. Viewed 18k times. Improve this question. Mirsad Mirsad 9, 8 8 gold badges 31 31 silver badges 51 51 bronze badges. See Steffen's answer as to why this might be a bad idea. However, you can still send hashes of the files to VirusTotal which can match known malware samples already in VT but won't detect new or modified malware — BlueCacti.
GroundZero Sending file hashes may be dangerous, too. For instance, it is easy for VT to determine which users have a copy of a certain porn movie on their hard disk. Add a comment. Active Oldest Votes. See also their Privacy Policy which clearly says: Information we share When you submit a file to VirusTotal for scanning, we may store it and share it with the anti-malware and security industry Files, URLs, comments and any other content submitted to or shared within VirusTotal may also be included in premium private services offered by VirusTotal to the anti malware and ICT security industry Still, I think that your idea of offering a simpler access to a useful service directly from the mail client makes sense.
Improve this answer. Steffen Ullrich Steffen Ullrich k 27 27 gold badges silver badges bronze badges. Yes, there is a commercial tool won't say names out there that got some attention because they had an option to upload files and attachments to virus total, some companies realized some of their sensitive data was being exposed. I know some companies will just upload and check hashes instead — nd SteffenUllrich, it would be good to add this one: support.
Mirsad: good suggestion, I've added it to the answer. An easy GUI to the superb online virus meta-scanner virustotal. VirusTotal Scanner is a Windows front-end GUI to the very popular VirusTotal site which provides a free virus metascan by uploading files to their web site. The whole point of VirusTotal is to give users access to a wide range of different virus scanners. While having virus protection installed is recommended, not all vendors can detect all viruses.
With VirusTotal Scanner, you get access to almost all popular virus scanners. The application provides a user interface which enables you to search the VirusTotal archives for tests of the file you wish to test.
Currently, it uses around 50 different virus scanners.
0コメント