When I say that Webroot users are protected from these threats I have multiple things on the mind. For instance:

- on the majority of occasions the malware samples dropped in these campaigns following a successful exploitation of a client-site vulnerability, are detected as already being a part of a malware family known and detected by Webroot SecureAnywhere Complete.

- Webroot’s built-in anti-client-side exploitation often prevents the actual client-side exploitation to take place on the affected host.

- Webroot’s built-in behavior-detection technology proactively detects the malicious intentions of the dropped executables, and prevents them from modifying and accessing critical system resources upon execution, thereby minimizing their impact on the operating system even if the user gets socially engineered to run these executables.

Hope this clarifies the “protected by Webroot” line.

Best,
Dancho