Does Norton 360 detect the BLISTER malware?
Sneaky new malware avoids detection – How to check your computer (msn.com)
This article from BleepingComputer has a quote from the certificate signing authority that notes the certificate being used was revoked December 21, 2021. So hopefully there should be no new infections from this campaign.
Good question indeed, one that, someone from Norton has to answer. Using "signed certificates" to underscore A/V isn't something new, this campaign is a bit different in that it uses valid system certificates to evade detection. Although Windows checks certificates almost daily, if devices are connected for a long period of time, no A/V company can prevent risky file downloads, visitation to websites that should not be visited in the first place. Opening e-mail attachments that are not from someone trusted and even when trusted. In a nutshell, users and how they use their devices cannot be covered.
Microsoft has some guidance suggestions at this link.
Conversely!! Our ISP has a certain level of responsibility as well. Do they scan traffic on their networks? They say they do, in reality that isn't the case. Ask your ISP what they are doing to protect you.
Having a good network router is a must. One that has robust VPN and Firewall protections. How does your router stack up?
SA