April issue of VB published

Posted by   Virus Bulletin on   Apr 1, 2013

The April issue of Virus Bulletin is now available for subscribers to download.

The April 2013 issue of Virus Bulletin is now available for subscribers to browse online or download in PDF or PRC (Kindle) format.

Some of the things this month's issue has in store are:

• Java security in the era of BYOD: 'It concerns me that my daughter's favourite game requires access to Wi-Fi, contacts, the operating system, etc.' Aleksander Czarnowski, AVET.

• Ogee whiz: The programming of General-Purpose Graphics Processing Units (GPGPU) has become a common way to take advantage of the great power available on video cards. The programs, known as 'shaders', can be used to implement many things, including the decryption of arbitrary data - and now there is a virus that does exactly that. Peter Ferrie takes a close look at W32/Ogee.

• A deeper look into the ZeroAccess clickbot: Click fraud has been one of the biggest concerns for online advertisers for many years, and as effort is put into developing pattern recognition and detection mechanisms to identify the fraudulent patterns, click fraud methodologies have been evolving steadily. Wayne Low takes a look at the internal workings of the ZeroAccess click fraud module.

• Pushdo's new second generation: The Pushdo botnet has been active in the wild since January 2007, with three main generations seen to date. Neo Tan and colleagues take an in-depth look at three different variants of a new, more advanced version of Pushdo's second generation.

• Shellcoding ARM: part 3: In the first and second parts of this series Aleksander Czarnowski covered the background information needed to understand the principles of ARM shellcoding and dissected some previously crafted shellcode. In this final part, he looks at some more advanced topics, including polymorphic shellcode and methods for its analysis.

• Phishing and fraud: the make-believe industry: The digitization of shopping and banking, the increasing use of social media, and the popularity of the Internet have made users more vulnerable to phishing, identity theft and other forms of online fraud. Bianca Dima and Alin Damian outline some subtle differences between two of the fastest growing online traps, phishing and fraud, and highlight some of the mechanisms that fool people into placing their sensitive data and money into the hands of the attackers.

Note: The April 2013 VB100 comparative review will be published as standalone article later in the month. As with all new VB100 and VBSpam reviews, the report will be available for non-subscribers to purchase as a standalone item (Virus Bulletin subscribers will be notified by email when the comparative is available to download). Non-subscribers can purchase VB100 reports here and VBSpam reports here.

Subscribers click here to access the issue.

If you are not already a subscriber why not take the chance to subscribe now.

Posted on 4 April 2013 by Virus Bulletin

Latest posts: