March issue of VB published

Posted by   Virus Bulletin on   Mar 1, 2013

The March issue of Virus Bulletin is now available for subscribers to download.

The March 2013 issue of Virus Bulletin is now available for subscribers to browse online or download in PDF or PRC (Kindle) format.

Some of the things this month's issue has in store are:

• Yesterday's solutions to today's problems: 'The collection of detailed statistics, their interpretation and analysis, combined with the desire to improve society, resolved many of the problems of the industrial revolution. The same approaches can be used today to end the high-risk work practices that leak data, to drive the adoption of best practices, and to provide the justification for investments in better security.' Martin Lee, Symantec.

• The evolution of Zortob: Zortob didn't make big headlines when it first appeared a little over a year ago, but a new generation of the malware hitting the lab's honeypots prompted Dong Xie to take a closer look.

• It's mental static!: We have seen viruses with binary components, viruses with script components, and viruses with binary components that drop script components. Now comes a virus whose binary component executes its script component directly in memory by using a binary interface, instead of dropping the script component first. Peter Ferrie has the details.

• What are browser exploit kits up to? A look into Sweet Orange and ProPack: Blackhole has been the major player in the exploit kit market for a while now, but the Sweet Orange and ProPack kits have recently entered the market and are rapidly gaining in popularity. Aditya Sood and colleagues take a look at advancements in the design of the new kits on the block.

• Shellcoding ARM: part 2: In the first part of his shellcoding ARM series Aleksander Czarnowski covered the background and principles of ARM shellcoding. This month he moves on to dissect some previously crafted shellcode.

Note: The March 2013 VBSpam comparative review will be published as standalone article later in the month. As with all new VB100 and VBSpam reviews, the report will be available for non-subscribers to purchase as a standalone item (Virus Bulletin subscribers will be notified by email when the comparative is available to download). Non-subscribers can purchase VB100 reports here and VBSpam reports here.

Subscribers click here to access the issue.

If you are not already a subscriber why not take the chance to subscribe now.

Posted on 5 March 2013 by Virus Bulletin

Latest posts: