Blacklist

Since malware has been specifically modified to remain undetected, virus scanners have lost tremendous efficacy. A blacklist can only be used to block everything that is already known - be it a certain malware or a certain behavior. If the malware and its behavior are not known to the virus scanner, it can cause undisturbed damage to the network.

The fact is that hundreds of networks are attacked by malware every day, even though state-of-the-art virus scanners maintain up-to-date blacklists and perform complex behavior-based analyses.

As a result, the number of successful attacks continues to rise, as the Identity Theft Resource Center's surveys have shown for over 10 years.