Comment by throwaway09223

AV doesn't detect the exploit mechanism -- that's not how it works. It's only pattern matching existing binaries.

The difficulty level is "recompile with small changes and test that it doesn't match" not "develop a new attack vector"

It really is stupid and pointless against an attacker with even a bare minimum of competence (able to run a software build vs downloading binaries)