AMTSO News 2024-01-26

Welcome to our regular roundup of events and activities in and around AMTSO. 

RTTL and ThreatList

The ThreatList system is building up participants with a number of new reporters already enrolled and more expected shortly, we also have several test labs signed up to make use of the sample feeds once they come online. The first sets of samples have been received into the system and we hope to establish a steady quantity of samples very shortly. Our process for approval of new participants has been exercised and a batch of applications are under review currently. Anyone interested in contributing samples and/or metadata, or test labs interested in consuming the feed, is invited to sign up via the form here:

The working group overseeing the ThreatList and RTTL projects held their regular call this week, participation in the RTTL system is also expanding steadily with several new submitters expected to come online in the next few weeks.

Meetings and Events

We will be holding another Testing Town Hall event on February 14th. The agenda will include a talk on “Detection, Response, Usability, Integration, XDR testing” from SE Labs, and a further talk from SecureIQLab. Non-members can sign up to attend our events here:

We continue to map out our event plans for 2024 and have confirmed our main member meeting will be held in Dublin ahead of the Virus Bulletin conference, with Board and Executive Team meetings taking place on Sunday September 29th, the main member meeting on Monday 30th and a guest event which we hope will focus on addressing the needs of the CISO community to be held on Tuesday October 1st. More details and registration information will be circulated as soon as plans are finalized.

XDR Testing Criteria

Our XDR group met last week, including participation from some non-member guests interested in the group’s plans, the call focused on refining and finalizing our core taxonomy of components from which we will build tracking systems and formal testing criteria. Another round of outreach to members with expertise in the area and we expect to expand the group over the next few weeks.

New Frontiers group

We continue to work on our program of outreach to CISOs and others working in the area of product evaluation and selection, further calls are expected over the next few weeks and we will shortly start putting together lists of candidates for our proposed CISO advisory panel. A working group call was held this week where we discussed further methods of outreach and potential timings and locations for in-person events. The group will meet again on February 7th.

AMTSO Standard and Test Calendar

2024 got off to a busy start for our Standard team with a large set of new tests getting under way shortly before the end-of-year break. Notifications and commentary requests have been issued in bulk alongside multiple updates to our Test Calendar. Here’s a summary of activities from our Standard compliance team:

  • Phase 1 Commentary collections are pending for the following public test notifications.
    • AVLab Cybersecurity Foundation’s January 2024 Advanced In-the-Wild Malware Test (AMTSO Test ID: AMTSO-LS1-TP102)
    • AV-Test Android Consumer Product Test Series for 2024 (AMTSO Test ID: AMTSO-LS1-TP103)
    • AV-Test MacOS Business Product Test Series for 2024 (AMTSO Test ID: AMTSO-LS1-TP104)
    • AV-Test MacOS Consumer Product Test Series for 2024 (AMTSO Test ID: AMTSO-LS1-TP105)
    • AV-Test Windows Business Product Test Series for 2024 (AMTSO Test ID: AMTSO-LS1-TP106)
    • AV-Test Windows Consumer Product Test Series for 2024 (AMTSO Test ID: AMTSO-LS1-TP107)
    • AppEsteem 2024 Unwanted Software (UwS) Handling Certification Test Series (AMTSO Test ID: AMTSO-LS1-TP108)
  • Phase 2 Commentary collections are underway for the Testing Ground Labs December 2023 Consumer Android Malware Test Report (AMTSO Test ID: AMTSO-LS1-TP100) and December 2023 Enterprise Android Malware Test Report (AMTSO Test ID: AMTSO-LS1-TP101).  Both close on Monday, January 29th, 2024 and Compliance Confirmation Reports are expected to be issued shortly thereafter.

Information on all published and upcoming tests being tracked by AMTSO can be found in our test calendar.


We have another new membership in process of setting up and should have details in the next newsletter, and we hope to see several more in the coming weeks. Companies interested in being part of AMTSO can find more information here:


We send this newsletter to all AMTSO member representatives, as well as non-members who have engaged with AMTSO recently and have an interest in what’s going on in the AMTSO community. If you have any friends or colleagues who would like to be kept informed of developments in the testing world, they can sign up here. If you’d like to know more about joining the AMTSO community, there’s information and an application form here.