VB Blog

VB2017 paper: Nine circles of Cerber

Posted by   Martijn Grooten on   Dec 15, 2017

Cerber is one of the major names in the world of ransomware, and last year, Check Point released a decryption service for the malware. Today, we publish a VB2017 paper by Check Point's Stanislav Skuratovich describing how the Cerber decryption tool worked; we have also uploaded the video of the presentation of this paper, by Or Eshed and Yaniv Balmas.

Read more  

Attack on Fox-IT shows how a DNS hijack can break multiple layers of security

Posted by   Martijn Grooten on   Dec 14, 2017

Dutch security firm Fox-IT deserves praise for being open about an attack on its client network. There are some important lessons to be learned about DNS security from its post-mortem.

Read more  

Throwback Thursday: BGP - from route hijacking to RPKI: how vulnerable is the Internet?

Posted by   Martijn Grooten on   Dec 14, 2017

For this week's Throwback Thursday, we look back at the video of a talk Level 3's Mike Benjamin gave at VB2016 in Denver, on BGP and BGP hijacks.

Read more  

Security Planner gives security advice based on your threat model

Posted by   Martijn Grooten on   Dec 13, 2017

Citizen Lab's Security Planner helps you improve your online safety, based on the specific threats you are facing.

Read more  

VB2017 video: Spora: the saga continues a.k.a. how to ruin your research in a week

Posted by   Martijn Grooten on   Dec 11, 2017

Today, we publish the video of the VB2017 presentation by Avast researcher Jakub Kroustek and his former colleague Előd Kironský, now at ESET, who told the story of Spora, one of of the most prominent ransomware families of 2017.

Read more  

VB2017 paper: Modern reconnaissance phase on APT – protection layer

Posted by   Martijn Grooten on   Dec 7, 2017

During recent research, Cisco Talos researchers observed the ways in which APT actors are evolving and how a reconnaissance phase is included in the infection vector in order to protect valuable zero-day exploits or malware frameworks. At VB2017 in Madrid, two of those researchers, Paul Rascagneres and Warren Mercer, presented a paper detailing five case studies that demonstrate how the infection vector is evolving. Today we publish both Paul and Warren's paper and the recording of their presentation.

Read more  

VB2017 paper: Peering into spam botnets

Posted by   Martijn Grooten on   Dec 1, 2017

At VB2017 in Madrid, CERT Poland researchers Maciej Kotowicz and Jarosław Jedynak presented a paper detailing their low-level analysis of five spam botnets. Today we publish their full paper.

Read more  

Throwback Thursday: Anti-malware testing undercover

Posted by   Martijn Grooten on   Nov 30, 2017

We look back at the VB2016 presentation by Righard Zwienenberg (ESET) and Luis Corrons (Panda Security), in which they discussed various issues relating to anti-malware testing.

Read more  

Virus Bulletin relaunches VB Security Jobs Market for both employers and job seekers

Posted by   Martijn Grooten on   Nov 30, 2017

As an independent body in the IT security industry, Virus Bulletin is in an ideal position to act as a global source of information both about jobs currently available in the field and about those candidates currently seeking to start or progress their career in the industry - which is why we have relaunched the VB Security Jobs Market.

Read more  

VB2017 paper: Offensive malware analysis: dissecting OSX/FruitFly.B via a custom C&C server

Posted by   Martijn Grooten on   Nov 29, 2017

At VB2017 in Madrid, macOS malware researcher Patrick Wardle presented the details of a specific piece of Mac malware, FruitFly, which he analysed through a custom C&C server - a technique that will also be of interest for researchers of malware on other platforms. Today we publish both Patrick's paper and the recording of his presentation.

Read more  

Search blog

MS06-040 fears spread

Exploit worm stories continue to appear, but threat believed minor.
Exploit worm stories continue to appear, but threat believed minor. Reports are proliferating across the Internet, warning of the dangers faced by users of older operating systems… https://www.virusbulletin.com/blog/2006/08/ms06-040-fears-spread/

Test company creates malware

Consumer organisation makes over 5,000 'virus variants' for AV product testing.
Consumer organisation makes over 5,000 'virus variants' for AV product testing.ConsumerReports.org, a non-profit consumer website, has announced that it created 5,500 'new virus… https://www.virusbulletin.com/blog/2006/08/test-company-creates-malware/

Tough week for Symantec

Security firm suffers security bug and incompatibility criticism.
Security firm suffers security bug and incompatibility criticism. After announcing on Friday the discovery of a vulnerability in its Backup Exec software, Symantec suffered press… https://www.virusbulletin.com/blog/2006/08/tough-week-symantec/

US e-vigilante takes on spammers

65-year-old files 82 cases in two years.
65-year-old files 82 cases in two years. A retired Pittsburgh man has used a Pennsylvania state law, allowing spam victims $100 compensation for every spam received, to fight back… https://www.virusbulletin.com/blog/2006/08/us-e-vigilante-takes-spammers/

OneCare pounds competitors

Microsoft's AV storms to second in US sales charts.
Microsoft's AV storms to second in US sales charts. Heavily discounted Windows Live OneCare took over 15% of over-the-counter US sales of AV software last month, according to… https://www.virusbulletin.com/blog/2006/08/onecare-pounds-competitors/

Spammers sued under child-protection law

State of Michigan accuses spam companies of corrupting minors.
State of Michigan accuses spam companies of corrupting minors. The Attorney General of Michigan state has announced plans to prosecute two US companies under anti-spam laws… https://www.virusbulletin.com/blog/2006/08/spammers-sued-under-child-protection-law/

Patched Windows vuln exploited

As Microsoft plugs security holes, hackers quickly take advantage.
As Microsoft plugs security holes, hackers quickly take advantage. An exploit has been sighted using a vulnerability patched this week, as part of Microsoft's 'Patch Tuesday' set… https://www.virusbulletin.com/blog/2006/08/patched-windows-vuln-exploited/

BlackBerry 'Trojan' unveiled

Mobile device proof-of-concept opens hole in network security.
Mobile device proof-of-concept opens hole in network security. A proof-of-concept attack, which uses the BlackBerry mobile device to breach network security, was demonstrated at… https://www.virusbulletin.com/blog/2006/08/blackberry-trojan-unveiled/

JFK spam scam

419ers try conspiracy tactic.
419ers try conspiracy tactic. The old 419 scam has adopted yet another guise, and another target audience. The lure of the latest batch of spams is the promise of insight into the… https://www.virusbulletin.com/blog/2006/08/jfk-spam-scam/

419 ringleader arrested

Scammer made $2m, now behind bars in Lagos.
Scammer made $2m, now behind bars in Lagos. The head of a 419 gang who made vast sums conning email victims out of their cash has been arrested in Lagos, Nigeria. The announcement… https://www.virusbulletin.com/blog/2006/08/419-ringleader-arrested/

F-Secure and Symbian row over hype

Commwarrior alert reignites battle over mobile malware danger.
Commwarrior alert reignites battle over mobile malware danger. An alert from F-Secure over a new version of the Commwarrior mobile worm has led to angry words from mobile… https://www.virusbulletin.com/blog/2006/08/f-secure-and-symbian-row-over-hype/

AOL hands out security software

Web giant provides free Kaspersky AV to all.
Web giant provides free Kaspersky AV to all. From Monday, ISP leviathan AOL began providing free security software for its customers and anyone else who cares to download it. The… https://www.virusbulletin.com/blog/2006/08/aol-hands-out-security-software/

Badware blacklist comes into force at Google

Search engine starts flagging suspect sites.
Search engine starts flagging suspect sites. Search goliath Google has begun using a blacklist supplied by the Stop Badware Coalition to warn its users about sites known to be… https://www.virusbulletin.com/blog/2006/08/badware-blacklist-comes-force-google/

South African bank gives away Trend software

More online customers get free protection.
More online customers get free protection. South African bank ABSA plans to give away security software from Trend Micro to its 650,000+ online banking customers. The move,… https://www.virusbulletin.com/blog/2006/08/south-african-bank-gives-away-trend-software/

Spammers target phones

Text message spam on the rise.
Text message spam on the rise. More and more users of mobile phone SMS messaging are receiving spam, according to reports. The problem is especially serious in places like the US,… https://www.virusbulletin.com/blog/2006/08/spammers-target-phones/

BlackHat shows off yet more holes

As conference highlights security issues, MS dares hackers to find more.
As conference highlights security issues, MS dares hackers to find more. A tidal wave of new security flaws, and vectors for hacking and malware, has gushed out of the BlackHat… https://www.virusbulletin.com/blog/2006/08/blackhat-shows-yet-more-holes/

More vulns in AV products

eTrust, PC Tools suffer security bugs.
eTrust, PC Tools suffer security bugs. CA's WebScan has had several security holes discovered in its ActiveX control system, while PC Tools AntiVirus has been revealed to have… https://www.virusbulletin.com/blog/2006/08/more-vulns-av-products/

Norton scares vicars

Sermon software spyware, says Symantec.
Sermon software spyware, says Symantec. Popular software used by Church of England clergy has been mislabelled as spyware by Symantec's Norton software. The software, called… https://www.virusbulletin.com/blog/2006/08/norton-scares-vicars/

Serious vulns in Centrino wireless

Intel releases generic patches, urges users to seek specific fixes.
Intel releases generic patches, urges users to seek specific fixes. Several security flaws have been exposed in Intel's Centrino wireless technology, which could allow hackers to… https://www.virusbulletin.com/blog/2006/08/serious-vulns-centrino-wireless/

Virus writers continue targeting Microsoft's latest ideas

Another piece of malware for MS Powershell.
Another piece of malware for MS Powershell. Another piece of malware for Microsoft's Powershell is making the news. The script virus exploits the new command shell, formerly known… https://www.virusbulletin.com/blog/2006/08/virus-writers-continue-targeting-microsoft-s-latest-ideas/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.