VirusTotal poisoning of ransomware family
Date: 2023
Affected: VirusTotal / shared malware classifiers
Attack vector: model-poisoning
Category: real-world
Severity: High

McAfee ATR noticed an out-of-the-ordinary increase in reports of a ransomware family, with many samples submitted through a popular virus-sharing platform within a short time, indicating poisoning of the shared malware corpus.


Mitigations:

Architectural layers (MAESTRO):