VB Blog

VB2017 paper: Nine circles of Cerber

Posted by   Martijn Grooten on   Dec 15, 2017

Cerber is one of the major names in the world of ransomware, and last year, Check Point released a decryption service for the malware. Today, we publish a VB2017 paper by Check Point's Stanislav Skuratovich describing how the Cerber decryption tool worked; we have also uploaded the video of the presentation of this paper, by Or Eshed and Yaniv Balmas.

Read more  

Attack on Fox-IT shows how a DNS hijack can break multiple layers of security

Posted by   Martijn Grooten on   Dec 14, 2017

Dutch security firm Fox-IT deserves praise for being open about an attack on its client network. There are some important lessons to be learned about DNS security from its post-mortem.

Read more  

Throwback Thursday: BGP - from route hijacking to RPKI: how vulnerable is the Internet?

Posted by   Martijn Grooten on   Dec 14, 2017

For this week's Throwback Thursday, we look back at the video of a talk Level 3's Mike Benjamin gave at VB2016 in Denver, on BGP and BGP hijacks.

Read more  

Security Planner gives security advice based on your threat model

Posted by   Martijn Grooten on   Dec 13, 2017

Citizen Lab's Security Planner helps you improve your online safety, based on the specific threats you are facing.

Read more  

VB2017 video: Spora: the saga continues a.k.a. how to ruin your research in a week

Posted by   Martijn Grooten on   Dec 11, 2017

Today, we publish the video of the VB2017 presentation by Avast researcher Jakub Kroustek and his former colleague Előd Kironský, now at ESET, who told the story of Spora, one of of the most prominent ransomware families of 2017.

Read more  

VB2017 paper: Modern reconnaissance phase on APT – protection layer

Posted by   Martijn Grooten on   Dec 7, 2017

During recent research, Cisco Talos researchers observed the ways in which APT actors are evolving and how a reconnaissance phase is included in the infection vector in order to protect valuable zero-day exploits or malware frameworks. At VB2017 in Madrid, two of those researchers, Paul Rascagneres and Warren Mercer, presented a paper detailing five case studies that demonstrate how the infection vector is evolving. Today we publish both Paul and Warren's paper and the recording of their presentation.

Read more  

VB2017 paper: Peering into spam botnets

Posted by   Martijn Grooten on   Dec 1, 2017

At VB2017 in Madrid, CERT Poland researchers Maciej Kotowicz and Jarosław Jedynak presented a paper detailing their low-level analysis of five spam botnets. Today we publish their full paper.

Read more  

Throwback Thursday: Anti-malware testing undercover

Posted by   Martijn Grooten on   Nov 30, 2017

We look back at the VB2016 presentation by Righard Zwienenberg (ESET) and Luis Corrons (Panda Security), in which they discussed various issues relating to anti-malware testing.

Read more  

Virus Bulletin relaunches VB Security Jobs Market for both employers and job seekers

Posted by   Martijn Grooten on   Nov 30, 2017

As an independent body in the IT security industry, Virus Bulletin is in an ideal position to act as a global source of information both about jobs currently available in the field and about those candidates currently seeking to start or progress their career in the industry - which is why we have relaunched the VB Security Jobs Market.

Read more  

VB2017 paper: Offensive malware analysis: dissecting OSX/FruitFly.B via a custom C&C server

Posted by   Martijn Grooten on   Nov 29, 2017

At VB2017 in Madrid, macOS malware researcher Patrick Wardle presented the details of a specific piece of Mac malware, FruitFly, which he analysed through a custom C&C server - a technique that will also be of interest for researchers of malware on other platforms. Today we publish both Patrick's paper and the recording of his presentation.

Read more  

Search blog

Hormel halts Spam King in his tracks

No 'Spam King' clothing line for Richter.
No 'Spam King' clothing line for Richter. Infamous spammer Scott Richter, aka the 'Spam King', has fallen at the first hurdle in his bid to launch a 'Spam King'-branded clothing… https://www.virusbulletin.com/blog/2004/06/hormel-halts-spam-king-his-tracks/

DIY do not spam

Chicago businessman takes matters into his own hands
Chicago businessman takes matters into his own hands Chicago businessman Rocky Mosele has created his own 'do not spam' list. Fed up of the disruptive effect spam was having on… https://www.virusbulletin.com/blog/2004/06/diy-do-not-spam/

June

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2004/06/

Taiwanese Trojan writer arrested

Suspect not a teenager for a change.
Suspect not a teenager for a change. A Taiwanese engineer has been arrested on suspicion of creating a Trojan horse. Earlier this week, 30-year-old Wang Ping-an was apprehended… https://www.virusbulletin.com/blog/2004/05/taiwanese-trojan-writer-arrested/

German government spammed

Government email systems overwhelmed
Government email systems overwhelmed Barely a month after Germany's ruling Social Democratic Party (SPD) put forward proposals for tough new sanctions for spammers, the German… https://www.virusbulletin.com/blog/2004/05/german-government-spammed/

Legislation: NZ makes a move

New Zealand government moves toward anti-spam legislation
New Zealand government moves toward anti-spam legislation The government of New Zealand has signalled its intention to bring in anti-spam legislation. A discussion paper released… https://www.virusbulletin.com/blog/2004/05/legislation-nz-makes-move/

Cajun spammer tells it like it is

Straight talking spammer
Straight talking spammer A prolific emailer (read spammer) has told the US Senate Commerce Committee that, although the 30 million email messages he sends out each day comply… https://www.virusbulletin.com/blog/2004/05/cajun-spammer-tells-it-it/

Spend, spend, spend for Symantec

Anti-spam company to become AV vendor's latest purchase
Anti-spam company to become AV vendor's latest purchase Just days after revealing that its gateway anti-virus product will stop sending automatic virus notification 'spam' - a… https://www.virusbulletin.com/blog/2004/05/spend-spend-spend-symantec/

No rest for German police

Arrest of suspected Sasser author, arrest of suspected Phatbot author and questioning of five more suspects - all within the space of 7 days.
Arrest of suspected Sasser author, arrest of suspected Phatbot author and questioning of five more suspects - all within the space of 7 days. The German authorities have been busy… https://www.virusbulletin.com/blog/2004/05/no-rest-german-police/

Buying and selling

Trend buys back shares, Sybari prepares to sell
Trend buys back shares, Sybari prepares to sell Trend Micro's board of directors has announced plans to repurchase some of the company's shares from the market. The company will… https://www.virusbulletin.com/blog/2004/05/buying-and-selling/

SpamCop at receiving end of a restraining order

Venerable spam reporting outfit SpamCop has had a restraining order granted against it on behalf of alleged spammer OptInRealBig.com.
Venerable spam reporting outfit SpamCop has had a restraining order granted against it on behalf of alleged spammer OptInRealBig.com. Venerable spam reporting outfit SpamCop has… https://www.virusbulletin.com/blog/2004/05/spamcop-receiving-end-restraining-order/

Spam on the catwalk

Spammer extraordinaire launches own clothing line
Spammer extraordinaire launches own clothing line Scott Richter, spammer extraordinaire, is set to launch his own clothing line, according to Newsday . The man who brought to our… https://www.virusbulletin.com/blog/2004/05/spam-catwalk/

Law and order

Spamming set to become illegal in the Netherlands and other legislative news...
Spamming set to become illegal in the Netherlands and other legislative news... Spamming is about to become illegal in The Netherlands, after the upper house of the Dutch… https://www.virusbulletin.com/blog/2004/05/law-and-order/

Figures and fluctuations

Dips, increases and the cost of dealing with spam
Dips, increases and the cost of dealing with spam While the term 'spam' celebrated its tenth birthday last month, MessageLabs reported a decline in the volume of spam seen in… https://www.virusbulletin.com/blog/2004/05/figures-and-fluctuations/

NAI reverts to McAfee

Network Associates Inc. (NAI) to streamline and adopt (not so) new name.
Network Associates Inc. (NAI) to streamline and adopt (not so) new name. In a bid to reduce costs and increase productivity, Network Associates, Inc. (NAI) has announced plans to… https://www.virusbulletin.com/blog/2004/05/nai-reverts-mcafee/

Call for papers: AVAR 2004

AVAR calls for papers
AVAR calls for papers AVAR (the Association of anti-Virus Asia Researchers) has issued a call for papers for AVAR 2004 in Tokyo, which will take place 25-26 November 2004 in… https://www.virusbulletin.com/blog/2004/05/call-papers-avar-2004/

May

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2004/05/

Symantec vulnerabilities

eEye reports four new Symantec vulnerabilities
eEye reports four new Symantec vulnerabilities eEye Digital Security has reported that it has discovered four new vulnerabilities affecting Symantec products. Products affected… https://www.virusbulletin.com/blog/2004/04/symantec-vulnerabilities/

Business news

Acquisitions and new product lines
Acquisitions and new product lines UK-based web and email filtering company SurfControl revealed plans last month to acquire California-based email security firm MessageSoft Inc.… https://www.virusbulletin.com/blog/2004/04/business-news/

No bull?

Eset vs. BullGuard
Eset vs. BullGuard Recently it was brought to VB’s attention that affiliates of BullGuard have been cruising in the slipstream of Eset’s NOD32 product range. Visitors to the… https://www.virusbulletin.com/blog/2004/04/no-bull/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.