VB Blog

VB2018 paper: Fake News, Inc.

Posted by   Helen Martin on   Apr 25, 2019

A former reporter by profession, Andrew Brandt's curiosity was piqued when he came across what appeared at first glance to be the website of a small-town newspaper based in Illinois, but under scrutiny, things didn’t add up. At VB2018 he presented a paper in which he shared the results of his investigation of the site. Today, we publish his paper and the recording of his presentation.

Read more  

Paper: Alternative communication channel over NTP

Posted by   Martijn Grooten on   Apr 24, 2019

In a new paper published today, independent researcher Nikolaos Tsapakis writes about the possibilities of malware using NTP as a covert communication channel and how to stop this.

Read more  

VB2019 conference programme announced

Posted by   Martijn Grooten on   Apr 5, 2019

VB is excited to reveal the details of an interesting and diverse programme for VB2019, the 29th Virus Bulletin International Conference, which takes place 2-4 October in London, UK.

Read more  

VB2018 paper: Under the hood - the automotive challenge

Posted by   Martijn Grooten on   Mar 27, 2019

Car hacking has become a hot subject in recent years, and at VB2018 in Montreal, Argus Cyber Security's Inbar Raz presented a paper that provides an introduction to the subject, looking at the complex problem, examples of car hacks, and the challenges ahead. Today, we publish both Inbar's paper and the recording of his presentation.

Read more  

VB2018 paper and video: Android app deobfuscation using static-dynamic cooperation

Posted by   Martijn Grooten on   Mar 20, 2019

Static analysis and dynamic analysis each have their shortcomings as methods for analysing potentially malicious files. Today, we publish a VB2018 paper by Check Point researchers Yoni Moses and Yaniv Mordekhay, in which they describe a method that combines static and dynamic analysis to defeat app obfuscation in Android binaries. We also publish the video of their presentation.

Read more  

VB2019 call for papers closes this weekend

Posted by   Martijn Grooten on   Mar 15, 2019

The call for papers for VB2019 closes on 17 March, and while we've already received many great submissions, we still want more!

Read more  

Registration open for VB2019 ─ book your ticket now!

Posted by   Martijn Grooten on   Mar 13, 2019

Registration for VB2019, the 29th Virus Bulletin International Conference, is now open, with an early bird rate available until 1 July.

Read more  

The VB2019 call for papers is about ... papers

Posted by   Martijn Grooten on   Mar 8, 2019

When we are calling for papers for the Virus Bulletin conference as we are doing now, we really mean a written paper. But don't worry if you've never written a paper - we can help!

Read more  

VB2018 video: Adware is just malware with a legal department - how we reverse engineered OSX/Pirrit, received legal threats, and survived

Posted by   Martijn Grooten on   Mar 8, 2019

Amit Serper first analysed the OSX/Pirrit adware in 2016, highlighting some of its malware-like techniques, and soon afterwards started receiving legal threats from the company behind it. At VB2018 Amit gave a presentation in which he discussed both the adware and the legal threats he received for calling it malware. Today, we publish the video of Amit's presentation.

Read more  

VB2018 paper: Anatomy of an attack: detecting and defeating CRASHOVERRIDE

Posted by   Martijn Grooten on   Mar 5, 2019

In December 2016, the CRASHOVERRIDE malware framework was used to cause a blackout in Ukraine. At VB2018 in Montreal, Dragos researcher Joe Slowik presented a detailed paper on the framework, explaining how the malware works and how it targets various protocols used to operate the electric grid. Today we publish both Joe's paper and the recording of his presentation.

Read more  

Search blog

Test company creates malware

Consumer organisation makes over 5,000 'virus variants' for AV product testing.
Consumer organisation makes over 5,000 'virus variants' for AV product testing.ConsumerReports.org, a non-profit consumer website, has announced that it created 5,500 'new virus… https://www.virusbulletin.com/blog/2006/08/test-company-creates-malware/

MS06-040 fears spread

Exploit worm stories continue to appear, but threat believed minor.
Exploit worm stories continue to appear, but threat believed minor. Reports are proliferating across the Internet, warning of the dangers faced by users of older operating systems… https://www.virusbulletin.com/blog/2006/08/ms06-040-fears-spread/

OneCare pounds competitors

Microsoft's AV storms to second in US sales charts.
Microsoft's AV storms to second in US sales charts. Heavily discounted Windows Live OneCare took over 15% of over-the-counter US sales of AV software last month, according to… https://www.virusbulletin.com/blog/2006/08/onecare-pounds-competitors/

Tough week for Symantec

Security firm suffers security bug and incompatibility criticism.
Security firm suffers security bug and incompatibility criticism. After announcing on Friday the discovery of a vulnerability in its Backup Exec software, Symantec suffered press… https://www.virusbulletin.com/blog/2006/08/tough-week-symantec/

US e-vigilante takes on spammers

65-year-old files 82 cases in two years.
65-year-old files 82 cases in two years. A retired Pittsburgh man has used a Pennsylvania state law, allowing spam victims $100 compensation for every spam received, to fight back… https://www.virusbulletin.com/blog/2006/08/us-e-vigilante-takes-spammers/

Patched Windows vuln exploited

As Microsoft plugs security holes, hackers quickly take advantage.
As Microsoft plugs security holes, hackers quickly take advantage. An exploit has been sighted using a vulnerability patched this week, as part of Microsoft's 'Patch Tuesday' set… https://www.virusbulletin.com/blog/2006/08/patched-windows-vuln-exploited/

BlackBerry 'Trojan' unveiled

Mobile device proof-of-concept opens hole in network security.
Mobile device proof-of-concept opens hole in network security. A proof-of-concept attack, which uses the BlackBerry mobile device to breach network security, was demonstrated at… https://www.virusbulletin.com/blog/2006/08/blackberry-trojan-unveiled/

Spammers sued under child-protection law

State of Michigan accuses spam companies of corrupting minors.
State of Michigan accuses spam companies of corrupting minors. The Attorney General of Michigan state has announced plans to prosecute two US companies under anti-spam laws… https://www.virusbulletin.com/blog/2006/08/spammers-sued-under-child-protection-law/

F-Secure and Symbian row over hype

Commwarrior alert reignites battle over mobile malware danger.
Commwarrior alert reignites battle over mobile malware danger. An alert from F-Secure over a new version of the Commwarrior mobile worm has led to angry words from mobile… https://www.virusbulletin.com/blog/2006/08/f-secure-and-symbian-row-over-hype/

AOL hands out security software

Web giant provides free Kaspersky AV to all.
Web giant provides free Kaspersky AV to all. From Monday, ISP leviathan AOL began providing free security software for its customers and anyone else who cares to download it. The… https://www.virusbulletin.com/blog/2006/08/aol-hands-out-security-software/

JFK spam scam

419ers try conspiracy tactic.
419ers try conspiracy tactic. The old 419 scam has adopted yet another guise, and another target audience. The lure of the latest batch of spams is the promise of insight into the… https://www.virusbulletin.com/blog/2006/08/jfk-spam-scam/

419 ringleader arrested

Scammer made $2m, now behind bars in Lagos.
Scammer made $2m, now behind bars in Lagos. The head of a 419 gang who made vast sums conning email victims out of their cash has been arrested in Lagos, Nigeria. The announcement… https://www.virusbulletin.com/blog/2006/08/419-ringleader-arrested/

South African bank gives away Trend software

More online customers get free protection.
More online customers get free protection. South African bank ABSA plans to give away security software from Trend Micro to its 650,000+ online banking customers. The move,… https://www.virusbulletin.com/blog/2006/08/south-african-bank-gives-away-trend-software/

Badware blacklist comes into force at Google

Search engine starts flagging suspect sites.
Search engine starts flagging suspect sites. Search goliath Google has begun using a blacklist supplied by the Stop Badware Coalition to warn its users about sites known to be… https://www.virusbulletin.com/blog/2006/08/badware-blacklist-comes-force-google/

BlackHat shows off yet more holes

As conference highlights security issues, MS dares hackers to find more.
As conference highlights security issues, MS dares hackers to find more. A tidal wave of new security flaws, and vectors for hacking and malware, has gushed out of the BlackHat… https://www.virusbulletin.com/blog/2006/08/blackhat-shows-yet-more-holes/

More vulns in AV products

eTrust, PC Tools suffer security bugs.
eTrust, PC Tools suffer security bugs. CA's WebScan has had several security holes discovered in its ActiveX control system, while PC Tools AntiVirus has been revealed to have… https://www.virusbulletin.com/blog/2006/08/more-vulns-av-products/

Spammers target phones

Text message spam on the rise.
Text message spam on the rise. More and more users of mobile phone SMS messaging are receiving spam, according to reports. The problem is especially serious in places like the US,… https://www.virusbulletin.com/blog/2006/08/spammers-target-phones/

Serious vulns in Centrino wireless

Intel releases generic patches, urges users to seek specific fixes.
Intel releases generic patches, urges users to seek specific fixes. Several security flaws have been exposed in Intel's Centrino wireless technology, which could allow hackers to… https://www.virusbulletin.com/blog/2006/08/serious-vulns-centrino-wireless/

Norton scares vicars

Sermon software spyware, says Symantec.
Sermon software spyware, says Symantec. Popular software used by Church of England clergy has been mislabelled as spyware by Symantec's Norton software. The software, called… https://www.virusbulletin.com/blog/2006/08/norton-scares-vicars/

Supermarket scammed by hacker employees

Supermarket sweep.
Supermarket sweep. In a plot mirroring the Mike Judge comedy Office Space, a team of supermarket employees in Manama created trojan software to tweak company databases and steal… https://www.virusbulletin.com/blog/2006/08/supermarket-scammed-hacker-employees/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.