All Press ReleasesThe updated test reflects the latest ransomware tactics, techniques and procedures observed in recent threat campaigns.
SE LABSⓇ, the cyber security testing authority, today announced that CrowdStrike Falcon achieved a 100% Total Accuracy rating in one of the world’s most technically challenging ransomware tests. SE Labs’ detailed analysis evaluates real-world defence against both direct ransomware attacks and deep, full network breach scenarios.
The test replicates sophisticated multi-stage attacks incorporating spear phishing, privilege escalation, lateral movement and data exfiltration before attempting to deploy ransomware payloads. CrowdStrike Falcon detected and blocked every ransomware sample, including previously unseen variants, while generating zero false positive detections against legitimate applications.
Ransomware outcomes are shaped long before encryption begins, often by decisions made months or years earlier around patching discipline, privilege control and defensive coverage. A security control that performs well in isolation may behave very differently when faced with chained actions, degraded signals or persistent attackers – and small implementation weaknesses can compound rapidly once an adversary moves beyond the initial breach. The results of this test illustrate why product capability must be evaluated under realistic operating conditions.
“This report is not about ransomware as a payload alone. It’s about whether security products meaningfully support good cyber hygiene under pressure, and whether that support holds up across both immediate and deeply embedded attack scenarios,” says Simon Edwards, CEO and founder of SE Labs. “CrowdStrike is to be congratulated on yet again achieving a 100% Total Accuracy rating, despite significant changes in attack scenarios and malware samples compared with the previous test.”
“As a long-time advocate for independent security testing, CrowdStrike values SE Labs’ comprehensive evaluation of cyber security solutions. Their advanced testing methodology and the thorough analysis found in SE Labs’ reports provide reliable, unbiased assessments of how security products perform against real-world threat scenarios – invaluable information for organizations that are comparing cyber security solutions,” says Joel Spurlock, CrowdStrike VP Data Science.
This latest test represents a significant evolution from SE Labs’ last evaluation of CrowdStrike Falcon, reflecting fundamental shifts in how ransomware groups now operate. The assessment increased sample volume by 52% and focused on eleven actively operating threat groups, including nine families not included in the earlier report. These include Chaos, DragonForce and Medusa, alongside LockBit and Phobos, which were assessed last time.
This deliberate refresh by SE Labs ensures the test remains aligned with the threats organisations face today, rather than historical attack patterns.
The full analysis is available for free download: Advanced Security Ransomware Test Report for CrowdStrike Falcon
