VB Blog

VB2018 paper: Fake News, Inc.

Posted by   Helen Martin on   Apr 25, 2019

A former reporter by profession, Andrew Brandt's curiosity was piqued when he came across what appeared at first glance to be the website of a small-town newspaper based in Illinois, but under scrutiny, things didn’t add up. At VB2018 he presented a paper in which he shared the results of his investigation of the site. Today, we publish his paper and the recording of his presentation.

Read more  

Paper: Alternative communication channel over NTP

Posted by   Martijn Grooten on   Apr 24, 2019

In a new paper published today, independent researcher Nikolaos Tsapakis writes about the possibilities of malware using NTP as a covert communication channel and how to stop this.

Read more  

VB2019 conference programme announced

Posted by   Martijn Grooten on   Apr 5, 2019

VB is excited to reveal the details of an interesting and diverse programme for VB2019, the 29th Virus Bulletin International Conference, which takes place 2-4 October in London, UK.

Read more  

VB2018 paper: Under the hood - the automotive challenge

Posted by   Martijn Grooten on   Mar 27, 2019

Car hacking has become a hot subject in recent years, and at VB2018 in Montreal, Argus Cyber Security's Inbar Raz presented a paper that provides an introduction to the subject, looking at the complex problem, examples of car hacks, and the challenges ahead. Today, we publish both Inbar's paper and the recording of his presentation.

Read more  

VB2018 paper and video: Android app deobfuscation using static-dynamic cooperation

Posted by   Martijn Grooten on   Mar 20, 2019

Static analysis and dynamic analysis each have their shortcomings as methods for analysing potentially malicious files. Today, we publish a VB2018 paper by Check Point researchers Yoni Moses and Yaniv Mordekhay, in which they describe a method that combines static and dynamic analysis to defeat app obfuscation in Android binaries. We also publish the video of their presentation.

Read more  

VB2019 call for papers closes this weekend

Posted by   Martijn Grooten on   Mar 15, 2019

The call for papers for VB2019 closes on 17 March, and while we've already received many great submissions, we still want more!

Read more  

Registration open for VB2019 ─ book your ticket now!

Posted by   Martijn Grooten on   Mar 13, 2019

Registration for VB2019, the 29th Virus Bulletin International Conference, is now open, with an early bird rate available until 1 July.

Read more  

The VB2019 call for papers is about ... papers

Posted by   Martijn Grooten on   Mar 8, 2019

When we are calling for papers for the Virus Bulletin conference as we are doing now, we really mean a written paper. But don't worry if you've never written a paper - we can help!

Read more  

VB2018 video: Adware is just malware with a legal department - how we reverse engineered OSX/Pirrit, received legal threats, and survived

Posted by   Martijn Grooten on   Mar 8, 2019

Amit Serper first analysed the OSX/Pirrit adware in 2016, highlighting some of its malware-like techniques, and soon afterwards started receiving legal threats from the company behind it. At VB2018 Amit gave a presentation in which he discussed both the adware and the legal threats he received for calling it malware. Today, we publish the video of Amit's presentation.

Read more  

VB2018 paper: Anatomy of an attack: detecting and defeating CRASHOVERRIDE

Posted by   Martijn Grooten on   Mar 5, 2019

In December 2016, the CRASHOVERRIDE malware framework was used to cause a blackout in Ukraine. At VB2018 in Montreal, Dragos researcher Joe Slowik presented a detailed paper on the framework, explaining how the malware works and how it targets various protocols used to operate the electric grid. Today we publish both Joe's paper and the recording of his presentation.

Read more  

Search blog

November

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/11/

Unanimous vote for CAN-SPAM Act

US Senate approves federal anti-spam legislation.
US Senate approves federal anti-spam legislation. The US Senate has approved the first federal anti-spam legislation. The 'CAN-SPAM Act' was approved by Senate in a unanimous… https://www.virusbulletin.com/blog/2003/11/unanimous-vote-can-spam-act/

Totally Toronto: VB2003

Helen Martin recounts the Virus Bulletin conference.
Helen Martin recounts the Virus Bulletin conference. full article Posted on 30 October 2003 by Virus Bulletin https://www.virusbulletin.com/blog/2003/10/totally-toronto/

Linux vs. Windows viruses: a rebuttal

Pete Sergeant responds to an article by a SecurityFocus columnist, which hints that Linux users really don't need to worry about viruses.
Pete Sergeant responds to an article by a SecurityFocus columnist, which hints that Linux users really don't need to worry about viruses. Regarding Linux vs. Windows Viruses:… https://www.virusbulletin.com/blog/2003/10/linux-vs-windows-viruses-rebuttal/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/10/

Four arrests and a congressional hearing

US Congress starts to take computer security seriously, four alleged malware writers arrested...
US Congress starts to take computer security seriously, four alleged malware writers arrested... A US Congressional hearing was held last month to discuss the current state of… https://www.virusbulletin.com/blog/2003/09/four-arrests-and-congressional-hearing/

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/09/

Youth faces arrest for Blaster variant

Teenager suspected of creating Blaster variant faces arrest.
Teenager suspected of creating Blaster variant faces arrest. An 18-year-old suspected of creating a variant of the Blaster worm is reported to be facing arrest today. The… https://www.virusbulletin.com/blog/2003/08/youth-faces-arrest-blaster-variant/

Watching and waiting for Sobig

On 22 August 2003 anti-virus experts and sysadmins worldwide waited to discover what events, if any, would unfold when Sobig.F began a synchronized attack.
On 22 August 2003 anti-virus experts and sysadmins worldwide waited to discover what events, if any, would unfold when Sobig.F began a synchronized attack. Anti-virus experts and… https://www.virusbulletin.com/blog/2003/08/watching-and-waiting-sobig/

Symantec acquires Hilgraeve patent

Symantec pays $62.5m for a software patent, considers litigation against infringing competitors.
Symantec pays $62.5m for a software patent, considers litigation against infringing competitors. Symantec announced yesterday it had paid $62.5m for the infamous US Patent No.… https://www.virusbulletin.com/blog/2003/08/symantec-acquires-hilgraeve-patent/

No more Mr Nice Guy: UK gets tough on hi-tech criminals

Welsh virus-writer shown justice, not mercy
Welsh virus-writer shown justice, not mercy London’s Court of Appeal has turned down Welsh virus writer Simon Vallor’s appeal to shorten his two-year custodial sentence. Vallor,… https://www.virusbulletin.com/blog/2003/08/no-more-mr-nice-guy-uk-gets-tough-hi-tech-criminals/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/08/

Canadian retreat

Ontario plays host to VB2003 and NTBugtraq Retreat.
Ontario plays host to VB2003 and NTBugtraq Retreat. This year's Virus Bulletin conference programme covers a wide range of subjects - from the detailed analysis of emerging… https://www.virusbulletin.com/blog/2003/07/canadian-retreat/

The big wait

Will Microsoft's second attempt at entering the anti-virus field result in the 'vast shake-up' of the AV industry that was expected last time?
Will Microsoft's second attempt at entering the anti-virus field result in the 'vast shake-up' of the AV industry that was expected last time? The big news in June was the… https://www.virusbulletin.com/blog/2003/07/big-wait/

July

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/07/

School without thought - your thoughts

Your thoughts on the University of Calgary's proposals to teach virus writing in its course on computer viruses and malware.
Your thoughts on the University of Calgary's proposals to teach virus writing in its course on computer viruses and malware.Recently VB reported on the University of Calgary's… https://www.virusbulletin.com/blog/2003/06/school-without-thought-your-thoughts/

Microsoft buys into AV

Microsoft announces acquisition of anti-virus technology.
Microsoft announces acquisition of anti-virus technology.Microsoft has announced the acquisition of anti-virus technology from Romanian AV manufacturer GeCAD Software.The… https://www.virusbulletin.com/blog/2003/06/microsoft-buys-av/

School without thought

University course teaches students to write malware.
University course teaches students to write malware. The University of Calgary has announced very proudly on its website that a new undergraduate course will 'focus on developing… https://www.virusbulletin.com/blog/2003/06/school-without-thought/

June

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/06/

Military intelligence

US Army gets serious about anti-virus.
US Army gets serious about anti-virus. The US Army is using products supplied by Trend Micro to protect users of its Army Knowledge Online service from viruses, malicious content… https://www.virusbulletin.com/blog/2003/04/military-intelligence/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.