VB Blog

WordPress users urged to manually update to fix bug that prevents automatic updating

Posted by   Martijn Grooten on   Feb 8, 2018

Users of the popular WordPress content management system are urged to manually update their installation to version 4.9.4, as a bug in the previous version broke the ability to automatically install updates.

Read more  

New paper: A review of the evolution of Andromeda over the years

Posted by   Martijn Grooten on   Feb 7, 2018

The Andromeda botnet (aka Gamarue or Wauchos) has plagued Internet users for more than half a decade but, following a takedown effort and the arrest of the suspected botnet owner in December 2017, it is likely we have seen the end of it. In a new paper by Fortinet researchers Bahare Sabouri and He Xu, we look back at the evolution of Andromeda from version 2.06 to 2.10 and demonstrate both how it improved its loader to evade automatic analysis/detection and how the payload varied among the different versions.

Read more  

There is no evidence in-the-wild malware is using Meltdown or Spectre

Posted by   Martijn Grooten on   Feb 2, 2018

Reports of malware using the Meltdown or Spectre attacks are likely based on proof-of-concept code rather than files written for a malicious purpose.

Read more  

Throwback Thursday: Malware taking a bit(coin) more than we bargained for

Posted by   Martijn Grooten on   Feb 1, 2018

This Throwback Thursday, we republish the VB2012 paper by Microsoft researcher Amir Fouda, one of the earliest papers to look at malware targeting Bitcoin.

Read more  

First time speaker? Don't be afraid of submitting to the VB2018 CFP

Posted by   Martijn Grooten on   Jan 31, 2018

We especially encourage those less experienced in speaking in public to submit to the call for papers for VB2018, where we aim to provide a friendly and welcoming environment in which people can both present their own research and learn from what others have been working on.

Read more  

VB2017 paper: VirusTotal tips, tricks and myths

Posted by   Martijn Grooten on   Jan 25, 2018

At VB2017 in Madrid, security researcher Randy Abrams presented an overview of the VirusTotal service and then went on to bust several of the persistent myths that surround it. Today we publish both Randy's paper and the recording of his presentation.

Read more  

Healthcare CERTs highlight the need for security guidance for specific sectors

Posted by   Martijn Grooten on   Jan 24, 2018

A new computer emergency response team has been launched in the Netherlands to provide guidance specifically tailored to the healthcare sector. Martijn Grooten welcomes the development.

Read more  

VB2018 call for papers now open!

Posted by   Martijn Grooten on   Jan 23, 2018

Have you analysed a new online threat? Do you know a new way to defend against such threats? Are you tasked with securing systems and fending off attacks? The call for papers for VB2018 is now open and we want to hear from you!

Read more  

Book review: Serious Cryptography

Posted by   Martijn Grooten on   Jan 22, 2018

VB Editor Martijn Grooten recommends Jean-Philippe Aumasson's 'Serious Cryptography' as a very solid but practically focused introduction to cryptography.

Read more  

Necurs pump-and-dump spam campaign pushes obscure cryptocurrency

Posted by   Martijn Grooten on   Jan 16, 2018

A Necurs pump-and-dump spam campaign pushing the lesser known Swisscoin botnet is mostly background noise for the Internet.

Read more  

Search blog

February

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/02/

2006

Latest news from the anti-virus industry provided by independent anti-virus advisors, Virus Bulletin
NewsBitDefender vulnerability disclosedDetails released of overflow issue reported and patched.18 December 2006UK taxman warns of rebate phishMails promising tax refund just… https://www.virusbulletin.com/blog/2006/

A global view

live spam map showing exactly where spam is coming from.
live spam map showing exactly where spam is coming from. Maintainers of cartographic collections may be interested in a new map created by Mailinator, a company that provides… https://www.virusbulletin.com/blog/2005/09/global-view/

Addendum: August 2005 Netware 6.5 Comparative Review

VB regrets that Symantec was not included in NetWare 6.5 comparative review published in the August 2005 issue of Virus Bulletin
VB regrets that Symantec was not included in NetWare 6.5 comparative review published in the August 2005 issue of Virus Bulletin Unfortunately, due to a combination of… https://www.virusbulletin.com/blog/2005/09/addendum-august-2005-netware-6-5-comparative-review/

Latest VGrep

The latest version of the virus name lookup tool - VGrep, is now available.
The latest version of the virus name lookup tool - VGrep, is now available. VGrep is a system produced in an attempt to clear up some of the confusion surrounding the naming of… https://www.virusbulletin.com/blog/2005/09/latest-vgrep/

CME initiative sets forth

US-CERT will officially unveil its Common Malware Enumeration (CME) initiative this month.
US-CERT will officially unveil its Common Malware Enumeration (CME) initiative this month. The scheme, which will be operated by MITRE, and will work very much like the current… https://www.virusbulletin.com/blog/2005/09/cme-initiative-sets-forth/

Czech spammers receive fines

The Czech Office for Personal Data Protection (UOOU) imposes first fines for spamming offences.
The Czech Office for Personal Data Protection (UOOU) imposes first fines for spamming offences. The Czech Office for Personal Data Protection (UOOU) has imposed its first fines for… https://www.virusbulletin.com/blog/2005/09/czech-spammers-receive-fines/

Spam 'hotline' for German users

German email users can now report spam directly to the Federation of German Consumer Organisations (vzbv)
German email users can now report spam directly to the Federation of German Consumer Organisations (vzbv)German email users can now report spam directly to the Federation of German… https://www.virusbulletin.com/blog/2005/09/spam-hotline-german-users/

Symantec snaps up Wholesecurity

Symantec announces plans to purchase privately held behavioural endpoint security solutions provider WholeSecurity Inc.
Symantec announces plans to purchase privately held behavioural endpoint security solutions provider WholeSecurity Inc. WholeSecurity’s behavioural detection technology identifies… https://www.virusbulletin.com/blog/2005/09/symantec-snaps-wholesecurity/

AVIEN virtual conference

Organisers of the AVIEN/AVIEWS virtual conference issue call for papers.
Organisers of the AVIEN/AVIEWS virtual conference issue call for papers. The organisers of the inaugural AVIEN/AVIEWS virtual conference have issued a call for papers. The… https://www.virusbulletin.com/blog/2005/09/avien-virtual-conference/

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2005/09/

Trial and retribution

Former AOL employee Jason Smathers sentenced to 15 months imprisonment for selling customers' email details to spammers.
Former AOL employee Jason Smathers sentenced to 15 months imprisonment for selling customers' email details to spammers. Former AOL employee Jason Smathers has been sentenced to 15… https://www.virusbulletin.com/blog/2005/08/trial-and-retribution/

The naming game

CA becomes latest AV firm to join name game with the announcement of its new division
CA becomes latest AV firm to join name game with the announcement of its new division First there was Kaspersky Lab and ICSA Labs, then came along MessageLabs and SophosLabs. Now… https://www.virusbulletin.com/blog/2005/08/naming-game/

More hash woes

For the second year running, research presented at the annual Crypto conference raised concerns over the security of commonly-used hash functions.
For the second year running, research presented at the annual Crypto conference raised concerns over the security of commonly-used hash functions. For the second year running,… https://www.virusbulletin.com/blog/2005/08/more-hash-woes/

Black Hat round-up

Andrew Lee shares his highlights of the Black Hat Briefings USA
Andrew Lee shares his highlights of the Black Hat Briefings USA In the midsummer heat of the Nevada desert, close to two thousand people donned their sunscreen and their coolest… https://www.virusbulletin.com/blog/2005/08/black-hat-round/

AhnLab wins in anti-spyware ruling

Court approves AhnLab's spyware classification
Court approves AhnLab's spyware classification The Southern District Court of Seoul ruled this week that AhnLab's detection and labelling as spyware of the product of software… https://www.virusbulletin.com/blog/2005/08/ahnlab-wins-anti-spyware-ruling/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2005/08/

Hoax alert

New hoax email comes to light after the launch in the UK of a campaign involving personal emergency contact numbers
New hoax email comes to light after the launch in the UK of a campaign involving personal emergency contact numbers It has been a long while since VB reported on any virus hoaxes,… https://www.virusbulletin.com/blog/2005/07/hoax-alert/

Sun, sea, sand and scams

310 people arrested in Malaga after an operation involving the FBI, the US Postal Service and the Spanish police.
310 people arrested in Malaga after an operation involving the FBI, the US Postal Service and the Spanish police. Authorities in Malaga, Spain, must be congratulated on a bumper… https://www.virusbulletin.com/blog/2005/07/sun-sea-sand-and-scams/

Spammer reformed?

Scott Richter, aka the 'Spam King', is no longer classed as a spammer according to Spamhaus's authoritative Register of Known Spam Operations (ROKSO)
Scott Richter, aka the 'Spam King', is no longer classed as a spammer according to Spamhaus's authoritative Register of Known Spam Operations (ROKSO) Scott Richter, aka the 'Spam… https://www.virusbulletin.com/blog/2005/07/spammer-reformed/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.