Windows 10's built-in antivirus can now be used to download viruses

https://www.pcgamer.com/windows-10s-built-in-antivirus-can-now-be-used-to-download-viruses/

 

This shows why its always best to use 3rd party Anti-virus, you really can't trust a virus thats already included in an OS.
Nice heads up best get ready for a load of help requests from friends that ignored my warnings about Windows Defender.

 

Let alone the fact that it's one of the heaviest AVs out there but the Windows Defender fanboys still want to convince themselves that it's light because they never saw how their system could be without it.

 

I told them based on its ability detect virus (lack of), I knew it was a heavy usage AV but didn't want to beat the horse more when it was already dead on first hurdle.

Sent from my SNE-LX1 using Tapatalk

 

A post from Wilders Security:

 

So am I reading correctly on this, that it is only local meaning that someone has to actually be in front of your computer to exploit this?

 

Microsoft refutes claims of Windows 10 Defender security problem windowslatest.com - September 7, 2020

Windows Defender, also known as Microsoft Defender, has been around for some time in its current form, and it's getting better with every Windows 10 feature upgrade. A new report, however, claims that Windows Defender has been updated with a new command line tool that supports a “-DownloadFile” function.


In a statement, Microsoft has refuted these reports:

Despite these reports, Microsoft Defender antivirus and Microsoft Defender ATP will still protect customers from malware. These programs detect malicious files downloaded to the system through the antivirus file download feature – Microsoft spokesperson.

 

Somewhat true. Also, malware crafted vbscript or ps1 can be used to trigger fileless malware downloads. Andy Ful developer of Configure Defender confirmed it. https://malwaretips.com/threads/configuredefender-utility-for-windows-10.79039/post-903933