Varist launches free malware scanner amid AI threat

Varist has launched a free malware-scanning community service for users and security analysts. The platform is designed to check suspicious files and assign a real-time maliciousness rating.

The Iceland-based cyber security company says users can upload files for analysis and receive an assessment within seconds. It is aimed at both general users and security operations centre teams that need to triage files more quickly.

The launch comes as security vendors report growing concern about AI-generated malware and code that can alter itself during execution. This shift is making it harder for developers and defenders to distinguish between legitimate and harmful software, particularly in open-source repositories and software packages.

The community service uses Varist's Hybrid Detection Engine to scan files and model likely behaviour without running them in a traditional sandbox. According to the company, this is intended to identify both known malware and previously unseen threats while reducing the time and cost associated with older analysis methods.

Rising pressure

Security teams are dealing with a rising flow of alerts, while AI-assisted coding has added another layer of uncertainty to software supply chains. Tools that can quickly generate or rewrite code have made it easier to produce malicious variants, and defenders warn that some malware is now designed to change form during execution to avoid detection.

This has increased pressure on security operations centre staff, who are often expected to assess suspicious files rapidly with limited resources. Free online scanners already exist, but many offer only a basic yes-or-no result after several minutes, according to Varist.

Its system produces a more detailed execution profile and a probability-based maliciousness score. It also includes an AI chatbot that explains scan results in plain language, aiming to help users without malware-analysis expertise understand what has been found.

"Gen-AI bots are here and they're unleashing panic among security teams," said Siggi Petursson, Chief Product Officer at Varist. "The Varist Community resource equips companies of any size with instant access to protection against new self-evolving threats. Democratizing access to reliable threat intelligence empowers anyone who wants to check suspicious files to protect their business without becoming experts on malware or threat detection," said Petursson.

Detection model

Each instance of the detection engine can process about 500 files per second, according to the company. Varist also says malware behaviour can be analysed up to 1,000 times faster than with conventional sandboxing because the system predicts likely actions rather than executing code in a live environment.

That distinction matters because sandboxing remains a common way to examine suspicious files, but it can be slow and costly. It can also create practical limits for organisations that need to inspect large volumes of files or respond to fast-moving threats.

By contrast, predictive behavioural analytics tries to infer what a file is likely to do based on its elements and structure. In practice, this produces a risk score and behavioural profile without detonating the file. Supporters say that can speed triage and reduce exposure, while critics of prediction-led tools generally point to the need for strong validation to avoid false positives or missed threats.

Market context

Varist says its technology protects more than five billion mailboxes worldwide. The Iceland-headquartered company focuses on large-scale malware detection and says its systems combine heuristics with real-time dynamic behavioural analysis.

The release of a free community tool reflects a broader pattern in cyber security, where vendors increasingly offer open or low-cost services to attract users, gather threat data and widen access to defensive tools. For smaller businesses in particular, the appeal is clear. They face many of the same threats as larger organisations but often lack dedicated malware researchers or round-the-clock analyst teams.

The challenge for the sector is that malicious code is evolving faster than many established tools were built to handle. As AI systems become more embedded in software development and threat actors test new ways to automate attacks, demand is rising for tools that can deliver a quick judgement without requiring specialist expertise or lengthy analysis queues.

Varist says the service is intended to let users analyse files independently and understand risk within seconds, helping businesses reduce pressure on analysts while screening for both known malware and zero-day threats.