Sunday, May 19, 2024

VirusTotal AI code Analysis Expanded to Spot Malicious Windows, and Linux Script Files

In April 2023, Google announced VirusTotal Code Insight to improve the capacity of its malware detection and analysis platform. This week, Google released an enhanced version of VirusTotal Code Insight, including support for more scripting languages.

Code Insight is an AI-based code analysis feature powered by the Google Cloud Security AI Workbench that uses the Sec-PaLM large language model (LLM) tailored for security use cases.

“Code Insight has broadened its support for script formats, moving beyond PowerShell to offer analysis for various scripting languages,” VirusTotal founder Bernardo Quintero said.

Updates to VT Code Insight

Code Insight, which was once limited to analyzing a subset of PowerShell files, can currently detect malicious Batch (BAT), Command Prompt (CMD), Shell (SH), and VBScript (VBS) scripts.

The maximum file size limit for files handled by Code Insight has been doubled, allowing for an analysis of larger files.

Further, the model provides more brief and concentrated high-level explanations, emphasizing code behavior.

The user interface has been modified to display only the initial sentences of the report by default, with the option for users to expand the report as needed, preventing lengthy reports from overpowering the default view.

ESXiArgs sample analysis by VirusTotal Code Insight

The functionality is currently in active development and should be regarded as beta. In the upcoming months, VirusTotal intends to enhance it by supporting more file formats, bigger file sizes, and the analysis of executable file types like.exe.

For example, the team intends to provide the study with more context by granting the AI access to “any metadata related to the URLs and files linked in the code snippet.”

Security researchers and other users can utilize Code Insight to analyze the behavior of scripts, making it an intriguing feature. Its use will increase when the service is expanded to support more file types, particularly executable files.

Struggling to Apply The Security Patch in Your System? – 
Try All-in-One Patch Manager Plus

Website

Latest articles

Norway Recommends Replacing SSLVPN/WebVPN to Stop Cyber Attacks

A very important message from the Norwegian National Cyber Security Centre (NCSC) says that...

New Linux Backdoor Attacking Linux Users Via Installation Packages

Linux is widely used in numerous servers, cloud infrastructure, and Internet of Things devices,...

ViperSoftX Malware Uses Deep Learning Model To Execute Commands

ViperSoftX malware, known for stealing cryptocurrency information, now leverages Tesseract, an open-source OCR engine,...

Santander Data Breach: Hackers Accessed Company Database

Santander has confirmed that there was a major data breach that affected its workers...

U.S. Govt Announces Rewards up to $5 Million for North Korean IT Workers

The U.S. government has offered a prize of up to $5 million for information...

Russian APT Hackers Attacking Critical Infrastructure

Russia leverages a mix of state-backed Advanced Persistent Threat (APT) groups and financially motivated...

Millions Of IoT Devices Vulnerable To Attacks Leads To Full Takeover

Researchers discovered four significant vulnerabilities in the ThroughTek Kalay Platform, which powers 100 million...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Live API Attack Simulation

94% of organizations experience security problems in production APIs, and one in five suffers a data breach. As a result, cyber-attacks on APIs increased from 35% in 2022 to 46% in 2023, and this trend continues to rise.
Key takeaways include:

  • An exploit of OWASP API Top 10 vulnerability
  • A brute force ATO (Account Takeover) attack on API
  • A DDoS attack on an API
  • Positive security model automation to prevent API attacks

Related Articles