VB Blog

VB2016 video: Nymaim: the Untold Story

Posted by   Martijn Grooten on   Feb 8, 2017

Until very recently, the Nymaim banking trojan was a serious problem in Poland. Today, we publish the video of the VB2016 presentation by CERT Polska researchers Jarosław Jedynak and Maciej Kotowicz, in which they analyse this malware-dropper-turned-banking-trojan.

Read more  

The Living Dead Anti-Virus

Posted by   Virus Bulletin on   Feb 2, 2017

Should users uninstall their anti-virus products, as was recently suggested by a security expert in a widely shared article? In a guest post, security consultant Hendrik Pilz explains why he doesn't think this is a good idea.

Read more  

Paper: The journey and evolution of God Mode in 2016: CVE-2016-0189

Posted by   Martijn Grooten on   Jan 31, 2017

In a new paper published by Virus Bulletin, FireEye researchers Ankit Anubhav and Manish Sardiwal analyse the 'God Mode' vulnerability CVE-2016-0189 in Microsoft Internet Explorer.

Read more  

VB2016 video: Neverquest: Crime as a Service and On the Hunt for the Big Bucks

Posted by   Martijn Grooten on   Jan 30, 2017

At VB2016, Peter Kruse gave a presentation detailing the Neverquest trojan, the alleged author of which was arrested in Spain earlier this month. Today, we publish the recording of Peter's presentation.

Read more  

VB2016 paper: Great crypto failures

Posted by   Martijn Grooten on   Jan 24, 2017

Crypto is hard, and malware authors often make mistakes. At VB2016, Check Point researchers Yaniv Balmas and Ben Herzog discussed the whys and hows of some of the crypto blunders made by malware authors. Today, we publish their paper and the recording of their presentation.

Read more  

Call for Papers: VB2017

Posted by   Martijn Grooten on   Jan 19, 2017

We have opened the Call for Papers for VB2017. We are particularly interested in receiving submissions from those working outside the security industry itself.

Read more  

Ransomware not a problem for half of businesses

Posted by   Martijn Grooten on   Jan 11, 2017

According to a report by IBM Security, 70 per cent of businesses that are the victim of a ransomware attack end up paying the ransom. However, the report also suggests that a little over half of businesses manage to avoid getting infected at all, showing they must be doing something right.

Read more  

Ransomware would be much worse if it wasn't for email security solutions

Posted by   Martijn Grooten on   Jan 5, 2017

The latest VBSpam test brings good news: at least 199 out of every 200 emails containing a malicious attachment were blocked by email security solutions. All of the full solutions tested achieved a VBSpam award, with five earning a VBSpam+ award.

Read more  

Throwback Thursday: The malware battle: reflections and forecasts

Posted by   Helen Martin on   Jan 5, 2017

"Another year has come to its end and the malware battle still rages on." In January 2004, Jamz Yaneza reflected on the year just ended and pondered what the coming year would have in store for the AV industry.

Read more  

VB2016 paper: Open Source Malware Lab

Posted by   Martijn Grooten on   Jan 4, 2017

At VB2016, ThreatConnect Director of Research Innovation Robert Simmons presented a paper on setting up an open source malware lab. Today, we share the accompanying paper and video.

Read more  

Search blog

Corporate mail spam drops Haxdoor

Business-related message carries trojan.
Business-related message carries trojan. A vaguely official-sounding email is being widely spammed, claiming to relate to some nebulous business activity between the sender and… https://www.virusbulletin.com/blog/2006/08/corporate-mail-spam-drops-haxdoor/

Phone companies' security shaken

As T-Mobile hacker is convicted, AT&T reveals break-in.
As T-Mobile hacker is convicted, AT&T reveals break-in. A 23-year-old Oregon resident has been sentenced to a year of 'home detention', after being convicted of hacking into the… https://www.virusbulletin.com/blog/2006/08/phone-companies-security-shaken/

BitDefender to join mobile market

AV firm releases phone security beta.
AV firm releases phone security beta.BitDefender has become the latest AV company to make a move into the mobile device market. It has released a beta of its mobile AV software,… https://www.virusbulletin.com/blog/2006/08/bitdefender-join-mobile-market/

More ConsumerReports complaints

Testing organisation's methodology slammed again.
Testing organisation's methodology slammed again.ConsumerReports.org, the online wing of American consumers association Consumers Union, is once again taking flak for its testing… https://www.virusbulletin.com/blog/2006/08/more-consumerreports-complaints/

iPod spam carries trojan

Fake sales invoice includes downloader.
Fake sales invoice includes downloader. A new spam campaign claiming to be information on an order for a new iPod is accompanied by a trojan which, when run, attempts to download… https://www.virusbulletin.com/blog/2006/08/ipod-spam-carries-trojan/

AOL 9.0 slated for suspect tactics

More badware accusations levelled at web giant.
More badware accusations levelled at web giant.StopBadware.org, the international anti-malware coalition backed by Google and Sun among others, has labelled AOL's current free… https://www.virusbulletin.com/blog/2006/08/aol-9-0-slated-suspect-tactics/

IBM invests in security, others may follow

Big Blue purchase sparks rumours of more mergers.
Big Blue purchase sparks rumours of more mergers. When massive cross-sector IT giant IBM bought Internet Security Systems for a rumoured $1.3 billion last week, it joined the list… https://www.virusbulletin.com/blog/2006/08/ibm-invests-security-others-may-follow/

Share dealers robbed, phishing suspected

Canadian stock-trading association warns of security breaches.
Canadian stock-trading association warns of security breaches. The Investment Dealers Association of Canada (IDA), a national regulatory organisation, has released an urgent press… https://www.virusbulletin.com/blog/2006/08/share-dealers-robbed-phishing-suspected/

Malware mostly crime-related, says Panda

Security firm reports 88% of new malware linked to cyber crime.
Security firm reports 88% of new malware linked to cyber crime. The labs of Spanish firm Panda Software have released a quarterly report, stating that criminal activity is behind… https://www.virusbulletin.com/blog/2006/08/malware-mostly-crime-related-says-panda/

Three years for botnet master

Zombie herder sentenced to 37 months behind bars.
Zombie herder sentenced to 37 months behind bars. A Californian 21-year-old has been sent to a federal prison in the US, after being convicted of computer fraud and computer damage… https://www.virusbulletin.com/blog/2006/08/three-years-botnet-master/

Child porn blackmail spam carries trojan

Spoof mail claims to come from anti-child porn site.
Spoof mail claims to come from anti-child porn site. A spam campaign claiming to come from child porn activists ASACP accuses recipients of visiting child porn sites, suggesting a… https://www.virusbulletin.com/blog/2006/08/child-porn-blackmail-spam-carries-trojan/

Phishing help for Yahoo! users

As phishing nets spread wider, Yahoo! announces defensive 'seal'.
As phishing nets spread wider, Yahoo! announces defensive 'seal'. Web giant Yahoo! has announced plans to introduce a new anti-phishing system to help protect its customers. The… https://www.virusbulletin.com/blog/2006/08/phishing-help-yahoo-users/

Rooting out malware

Sophos joins anti-rootkit market, others expected to follow soon.
Sophos joins anti-rootkit market, others expected to follow soon.Sophos has released a free anti-rootkit tool, available for download from its website. The UK-based company joins… https://www.virusbulletin.com/blog/2006/08/rooting-out-malware/

Trend and Microsoft deny vulnerability

PowerPoint zero-day hype just hype after all.
PowerPoint zero-day hype just hype after all. After an announcement from Trend Micro sparked numerous reports of a zero-day PowerPoint exploit, taking advantage of an… https://www.virusbulletin.com/blog/2006/08/trend-and-microsoft-deny-vulnerability/

Stock scam spam duo sued

Pump-and-dump couple face fines, as do many others worldwide.
Pump-and-dump couple face fines, as do many others worldwide. A Connecticut couple have been indicted over claims they used a spam campaign to artificially inflate stock prices. In… https://www.virusbulletin.com/blog/2006/08/stock-scam-spam-duo-sued/

AOL AV in adware alarm

Free product offered by AOL accused of potentially unwanted tactics.
Free product offered by AOL accused of potentially unwanted tactics. Recently released Active Virus Shield, the Kaspersky-based anti-virus product from web giant AOL, is coming… https://www.virusbulletin.com/blog/2006/08/aol-av-adware-alarm/

McAfee faces legal and financial woes

With books under scrutiny, McAfee is sued over property rights.
With books under scrutiny, McAfee is sued over property rights. As McAfee faces up to the likelihood of its financial results for the last five years being overturned following… https://www.virusbulletin.com/blog/2006/08/mcafee-faces-legal-and-financial-woes/

Phishers target more charities

Christian Aid warns supporters of bogus emails, while Katrina phishmaster is indicted.
Christian Aid warns supporters of bogus emails, while Katrina phishmaster is indicted. Church charity organisation Christian Aid has released a statement warning supporters to be… https://www.virusbulletin.com/blog/2006/08/phishers-target-more-charities/

AOL digging for spammer's treasure

Web giant plans hunt for hidden spam gold.
Web giant plans hunt for hidden spam gold. ISP mammoth AOL has obtained a court judgement allowing it to dig up the land of a convicted spammer's family, in a search for a stash… https://www.virusbulletin.com/blog/2006/08/aol-digging-spammer-s-treasure/

Movie firm harasses users with spyware

Film download service accused of using spyware strongarm tactics.
Film download service accused of using spyware strongarm tactics. Washington state has brought an action against a firm called Movieland.com, after complaints that the company's… https://www.virusbulletin.com/blog/2006/08/movie-firm-harasses-users-spyware/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.