December issue of VB published

Posted by Virus Bulletin on Dec 1, 2009

The December issue of Virus Bulletin is now available for subscribers to download.

The December 2009 issue of Virus Bulletin is now available for subscribers to browse online or download in PDF format.

Some of the things this month's issue has in store are:

VB100 comparative review: Windows 7: With a double whammy of a brand new platform and a record-breaking haul of 43 products to test, the VB test team had their work cut out this month. John Hawes has all the details of how the products fared on the shiny new Windows 7 platform.

Cybersecurity awareness for the next generation: 'Ignorance of the risks of cybercrime is what poses the greatest threat to the new generation of Internet citizens.' Jeff Debrosse, ESET.

Twinkle, twinkle little star: Peter Ferrie likens W32/Satevis to a viral version of a mix tape - a virus that is essentially made up of a collection of routines taken from other viruses.

Behavioural analysis of Flash files: We have seen a notable escalation in web-based attacks over the past few years, especially with regard to malicious Flash files - which are capable of redirection, execution of embedded malicious code and exploitation via vulnerabilities. Here, Ken Dunham provides an overview of the behavioural analysis of Flash files.

Calling all speakers: VB2010 Vancouver: VB is seeking submissions from those wishing to present papers at VB2010 - the 20th Virus Bulletin International Conference in Vancouver.

Hotmail, Yahoo!, Gmail users hacked, but how?: In October, thousands of usernames and passwords belonging to Hotmail users were posted publicly online, and anyone could have taken them, logged into the accounts and done something with them. Gmail and Yahoo! were also targeted. Terry Zink asks: how did the hacker(s) gain access to all of these accounts and usernames? Should we be afraid that someone will guess our passwords? Why did they do it? What did they do with it? And should we worry about it happening to us?

Subscribers click here to access the issue.

If you are not already a subscriber why not take the chance to subscribe now.

Posted on 02 December 2009 by Virus Bulletin

Latest posts:

VBSpam tests to be executed under the AMTSO framework

VB is excited to announce that, starting from the Q3 test, all VBSpam tests of email security products will be executed under the AMTSO framework.

In memoriam: Prof. Ross Anderson

We were very sorry to learn of the passing of Professor Ross Anderson a few days ago.

In memoriam: Dr Alan Solomon

We were very sorry to learn of the passing of industry pioneer Dr Alan Solomon earlier this week.

New paper: Nexus Android banking botnet – compromising C&C panels and dissecting mobile AppInjects

In a new paper, researchers Aditya K Sood and Rohit Bansal provide details of a security vulnerability in the Nexus Android botnet C&C panel that was exploited in order to gather threat intelligence, and present a model of mobile AppInjects.

New paper: Collector-stealer: a Russian origin credential and information extractor

In a new paper, F5 researchers Aditya K Sood and Rohit Chaturvedi present a 360 analysis of Collector-stealer, a Russian-origin credential and information extractor.