VB Blog

VB2019 paper: Fantastic Information and Where to Find it: A guidebook to open-source OT reconnaissance

Posted by   Martijn Grooten on   Nov 22, 2019

A VB2019 paper by FireEye researcher Daniel Kapellmann Zafra explained how open source intelligence (OSINT) can be used to learn crucial details of the inner workings of many a system. Today we publish Daniel's paper and the recording of his presentation.

Read more  

VB2019 paper: Different ways to cook a crab: GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

Posted by   Martijn Grooten on   Nov 21, 2019

Though active for not much longer than a year, GandCrab had been one of the most successful ransomware operations. In a paper presented at VB2019 in London, McAfee researchers John Fokker and Alexandre Mundo looked at the malware code, its evolution and the affiliate scheme behind it. Today we publish both their paper and the recording of their presentation.

Read more  

VB2019 paper: Domestic Kitten: an Iranian surveillance program

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, Check Point researchers Aseel Kayal and Lotem Finkelstein presented a paper detailing an Iranian operation they named 'Domestic Kitten' that used Android apps for targeted surveillance. Today we publish their paper and the video of their presentation.

Read more  

VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, LINE's HeungSoo Kang explained how cryptocurrency exchanges had been attacked using Firefox zero-days. Today, we publish the video of his presentation.

Read more  

VB2019 paper: DNS on fire

Posted by   Martijn Grooten on   Nov 7, 2019

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

Read more  

German Dridex spam campaign is unfashionably large

Posted by   Martijn Grooten on   Nov 6, 2019

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Read more  

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

Posted by   Martijn Grooten on   Nov 5, 2019

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

Read more  

Emotet continues to bypass many email security products

Posted by   Martijn Grooten on   Nov 4, 2019

Having returned from a summer hiatus, Emotet is back targeting inboxes and, as seen in the VBSpam test lab, doing a better job than most other malicious campaigns at bypassing email security products.

Read more  

VB2019 paper: We need to talk - opening a discussion about ethics in infosec

Posted by   Martijn Grooten on   Nov 1, 2019

Those working in the field of infosec are often faced with ethical dilemmas that are impossible to avoid. Today, we publish a VB2019 paper by Kaspersky researcher Ivan Kwiatkowski looking at ethics in infosec as well as the recording of Ivan's presentation.

Read more  

Stalkerware poses particular challenges to anti-virus products

Posted by   Martijn Grooten on   Oct 31, 2019

Malware used in domestic abuse situations is a growing threat, and the standard way for anti-virus products to handle such malware may not be good enough. But that doesn't mean there isn't an important role for anti-virus to play.

Read more  

Search blog

Trend Micro buys anti-spyware firm

Trend to augment its anti-spyware presence
Trend to augment its anti-spyware presence AV firm Trend Micro has announced that it is to acquire InterMute Inc., a privately held anti-spyware firm, for $15 million. Trend plans… https://www.virusbulletin.com/blog/2005/05/trend-micro-buys-anti-spyware-firm/

May

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2005/05/

US early warning centre opens

Cyber Incident Detection Data Analysis Center announces the opening of its National Operations Center at the University of Pennsylvania.
Cyber Incident Detection Data Analysis Center announces the opening of its National Operations Center at the University of Pennsylvania. The Cyber Incident Detection Data Analysis… https://www.virusbulletin.com/blog/2005/04/us-early-warning-centre-opens/

UN discusses spam

The United Nations (UN) Working Group on Internet Governance focuses on spam, network security and cybercrime
The United Nations (UN) Working Group on Internet Governance focuses on spam, network security and cybercrime The United Nations (UN) has revealed that discussion at the third… https://www.virusbulletin.com/blog/2005/04/un-discusses-spam/

Three (days) is the magic number

Virus Bulletin is very pleased to announce that this year the VB conference will run in a three-day format
Virus Bulletin is very pleased to announce that this year the VB conference will run in a three-day format Virus Bulletin is very pleased to announce that this year the VB… https://www.virusbulletin.com/blog/2005/04/three-days-magic-number/

2.594.00 is not the magic number

Trend Micro forced to apologise to customers for faulty update file.
Trend Micro forced to apologise to customers for faulty update file. A red-faced Trend Micro has apologised to its customers for the release of a faulty update file that caused… https://www.virusbulletin.com/blog/2005/04/2-594-00-not-magic-number/

Symantec wins piracy case

AV firm awarded $3.1 million in case against software pirate
AV firm awarded $3.1 million in case against software pirate Symantec has been awarded a $3.1 million judgment in a software piracy lawsuit it filed in April last year. Symantec… https://www.virusbulletin.com/blog/2005/04/symantec-wins-piracy-case/

Car sales website fined for SMS spamming

Australian Communications Authority takes action
Australian Communications Authority takes action A popular Australian car sales website has been fined AU$6,600 for sending SMS spam. Classified car sales website Carsales.com.au… https://www.virusbulletin.com/blog/2005/04/car-sales-website-fined-sms-spamming/

April

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2005/04/

Blaster author avoids restitution

Microsoft allows Parson to work community service instead of paying $500,000
Microsoft allows Parson to work community service instead of paying $500,000 Microsoft has filed court documents requesting that Jeffrey Lee Parson, author of the B variant of the… https://www.virusbulletin.com/blog/2005/03/blaster-author-avoids-restitution/

Mac virus-writing competition cancelled

Offer of $25,000 reward for OS X virus is withdrawn - for legal reasons
Offer of $25,000 reward for OS X virus is withdrawn - for legal reasons A competition offering a $25,000 reward to the first person to successfully infect two Apple G5 PowerMacs… https://www.virusbulletin.com/blog/2005/03/mac-virus-writing-competition-cancelled/

No new owner for VMyths

Zero bids received in online auction of website
Zero bids received in online auction of website Industry hype-fighting website VMyths went up for auction on eBay this month, but no bids were received. For ten years VMyths has… https://www.virusbulletin.com/blog/2005/03/no-new-owner-vmyths/

Bankruptcy for Spam King

Microsoft lawsuit cited as reason for bankruptcy
Microsoft lawsuit cited as reason for bankruptcy High-profile email marketer Scott Richter, aka the 'Spam King', has filed for bankruptcy, citing a Microsoft lawsuit as the… https://www.virusbulletin.com/blog/2005/03/bankruptcy-spam-king/

US Anti-Spyware bill approved

A revised anti-spyware bill was approved by a committee in the US House of Representatives.
A revised anti-spyware bill was approved by a committee in the US House of Representatives. A revised anti-spyware bill was approved by a committee in the US House of… https://www.virusbulletin.com/blog/2005/03/us-anti-spyware-bill-approved/

Spammer investigated in the Ukraine

Spammer undergoes criminal investigation in the Donetsk region of the Ukraine
Spammer undergoes criminal investigation in the Donetsk region of the Ukraine A spammer is undergoing criminal investigation in the Donetsk region of the Ukraine. This is the… https://www.virusbulletin.com/blog/2005/03/spammer-investigated-ukraine/

Man sentenced for 911 Trojan

Louisiana man gets six months behind bars
Louisiana man gets six months behind bars A Louisiana man has been sentenced to six months imprisonment and ordered to pay Microsoft more than $27,000 after he admitted sending a… https://www.virusbulletin.com/blog/2005/03/man-sentenced-911-trojan/

Spyware bill approved

House of Representatives approves revised anti-spyware legislation
House of Representatives approves revised anti-spyware legislation Posted on 14 March 2005 by Virus Bulletin https://www.virusbulletin.com/blog/2005/03/spyware-bill-approved/

Multimedia messaging virus

Mobile phone virus replicates via MMS
Mobile phone virus replicates via MMS Researchers have reported a mobile phone virus that appears to be the first virus to replicate via MMS (Multimedia Messaging Service)… https://www.virusbulletin.com/blog/2005/03/multimedia-messaging-virus/

Symantec gains AV patent

AV company awarded patent for scanning technology
AV company awarded patent for scanning technology Symantec has been granted a patent for 'Data driven detection of viruses' - a method that has been used in Symantec's products… https://www.virusbulletin.com/blog/2005/03/symantec-gains-av-patent/

Spam conviction dismissed

Judge overturns conviction in US spam case
Judge overturns conviction in US spam case A US Judge has overturned a conviction in one of last year's high profile anti-spam cases. Judge Thomas D. Horne has ruled that there… https://www.virusbulletin.com/blog/2005/03/spam-conviction-dismissed/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.