AV-TEST: 17 security solutions tested against ransomware and infostealers

According to a report released in July 2026 by SITS Deutschland GmbH (AV-TEST), seventeen security solutions for Windows 11 have undergone testing to assess their capability in defending against advanced cyber threats. The tests specifically focused on ransomware and infostealers, which aim to hijack systems by leveraging legitimate Windows automation tools like Autolt.

The evaluation included eight products designed for consumer users and nine solutions intended for corporate environments. The findings indicate that most of these products, specifically seven consumer-grade solutions and nearly all enterprise-level ones, successfully blocked all tested threats without any errors. This demonstrates the effectiveness of many current security software offerings in providing robust protection against contemporary attack methodologies.

The testing methodology simulated realistic attack scenarios where threat actors utilized Autolt scripts to execute malicious code, such as ransomware or infostealers. Autolt, a legitimate automation tool, can perform complex tasks, making it an appealing option for attackers as its deployment may not immediately raise alarms.

AV-TEST regularly updates its testing procedures, occurring every two months, to keep pace with the evolving threat landscape. This ensures that the tests reflect current attack vectors, including tactics employed by the latest malware and attack groups. The results highlight the ongoing need for security solutions to adapt continuously to stay ahead of emerging threats.