VB Blog

VB2017 paper: Nine circles of Cerber

Posted by   Martijn Grooten on   Dec 15, 2017

Cerber is one of the major names in the world of ransomware, and last year, Check Point released a decryption service for the malware. Today, we publish a VB2017 paper by Check Point's Stanislav Skuratovich describing how the Cerber decryption tool worked; we have also uploaded the video of the presentation of this paper, by Or Eshed and Yaniv Balmas.

Read more  

Attack on Fox-IT shows how a DNS hijack can break multiple layers of security

Posted by   Martijn Grooten on   Dec 14, 2017

Dutch security firm Fox-IT deserves praise for being open about an attack on its client network. There are some important lessons to be learned about DNS security from its post-mortem.

Read more  

Throwback Thursday: BGP - from route hijacking to RPKI: how vulnerable is the Internet?

Posted by   Martijn Grooten on   Dec 14, 2017

For this week's Throwback Thursday, we look back at the video of a talk Level 3's Mike Benjamin gave at VB2016 in Denver, on BGP and BGP hijacks.

Read more  

Security Planner gives security advice based on your threat model

Posted by   Martijn Grooten on   Dec 13, 2017

Citizen Lab's Security Planner helps you improve your online safety, based on the specific threats you are facing.

Read more  

VB2017 video: Spora: the saga continues a.k.a. how to ruin your research in a week

Posted by   Martijn Grooten on   Dec 11, 2017

Today, we publish the video of the VB2017 presentation by Avast researcher Jakub Kroustek and his former colleague Előd Kironský, now at ESET, who told the story of Spora, one of of the most prominent ransomware families of 2017.

Read more  

VB2017 paper: Modern reconnaissance phase on APT – protection layer

Posted by   Martijn Grooten on   Dec 7, 2017

During recent research, Cisco Talos researchers observed the ways in which APT actors are evolving and how a reconnaissance phase is included in the infection vector in order to protect valuable zero-day exploits or malware frameworks. At VB2017 in Madrid, two of those researchers, Paul Rascagneres and Warren Mercer, presented a paper detailing five case studies that demonstrate how the infection vector is evolving. Today we publish both Paul and Warren's paper and the recording of their presentation.

Read more  

VB2017 paper: Peering into spam botnets

Posted by   Martijn Grooten on   Dec 1, 2017

At VB2017 in Madrid, CERT Poland researchers Maciej Kotowicz and Jarosław Jedynak presented a paper detailing their low-level analysis of five spam botnets. Today we publish their full paper.

Read more  

Throwback Thursday: Anti-malware testing undercover

Posted by   Martijn Grooten on   Nov 30, 2017

We look back at the VB2016 presentation by Righard Zwienenberg (ESET) and Luis Corrons (Panda Security), in which they discussed various issues relating to anti-malware testing.

Read more  

Virus Bulletin relaunches VB Security Jobs Market for both employers and job seekers

Posted by   Martijn Grooten on   Nov 30, 2017

As an independent body in the IT security industry, Virus Bulletin is in an ideal position to act as a global source of information both about jobs currently available in the field and about those candidates currently seeking to start or progress their career in the industry - which is why we have relaunched the VB Security Jobs Market.

Read more  

VB2017 paper: Offensive malware analysis: dissecting OSX/FruitFly.B via a custom C&C server

Posted by   Martijn Grooten on   Nov 29, 2017

At VB2017 in Madrid, macOS malware researcher Patrick Wardle presented the details of a specific piece of Mac malware, FruitFly, which he analysed through a custom C&C server - a technique that will also be of interest for researchers of malware on other platforms. Today we publish both Patrick's paper and the recording of his presentation.

Read more  

Search blog

New VB Spam Supplement

VB plans to present a selection of news and articles on spam and anti-spam techniques - some technical, some ethical, some relating to real-world experiences of dealing with spam.
VB plans to present a selection of news and articles on spam and anti-spam techniques - some technical, some ethical, some relating to real-world experiences of dealing with spam.… https://www.virusbulletin.com/blog/2003/11/new-vb-spam-supplement/

November

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/11/

Totally Toronto: VB2003

Helen Martin recounts the Virus Bulletin conference.
Helen Martin recounts the Virus Bulletin conference. full article Posted on 30 October 2003 by Virus Bulletin https://www.virusbulletin.com/blog/2003/10/totally-toronto/

Linux vs. Windows viruses: a rebuttal

Pete Sergeant responds to an article by a SecurityFocus columnist, which hints that Linux users really don't need to worry about viruses.
Pete Sergeant responds to an article by a SecurityFocus columnist, which hints that Linux users really don't need to worry about viruses. Regarding Linux vs. Windows Viruses:… https://www.virusbulletin.com/blog/2003/10/linux-vs-windows-viruses-rebuttal/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/10/

Four arrests and a congressional hearing

US Congress starts to take computer security seriously, four alleged malware writers arrested...
US Congress starts to take computer security seriously, four alleged malware writers arrested... A US Congressional hearing was held last month to discuss the current state of… https://www.virusbulletin.com/blog/2003/09/four-arrests-and-congressional-hearing/

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/09/

Youth faces arrest for Blaster variant

Teenager suspected of creating Blaster variant faces arrest.
Teenager suspected of creating Blaster variant faces arrest. An 18-year-old suspected of creating a variant of the Blaster worm is reported to be facing arrest today. The… https://www.virusbulletin.com/blog/2003/08/youth-faces-arrest-blaster-variant/

Watching and waiting for Sobig

On 22 August 2003 anti-virus experts and sysadmins worldwide waited to discover what events, if any, would unfold when Sobig.F began a synchronized attack.
On 22 August 2003 anti-virus experts and sysadmins worldwide waited to discover what events, if any, would unfold when Sobig.F began a synchronized attack. Anti-virus experts and… https://www.virusbulletin.com/blog/2003/08/watching-and-waiting-sobig/

Symantec acquires Hilgraeve patent

Symantec pays $62.5m for a software patent, considers litigation against infringing competitors.
Symantec pays $62.5m for a software patent, considers litigation against infringing competitors. Symantec announced yesterday it had paid $62.5m for the infamous US Patent No.… https://www.virusbulletin.com/blog/2003/08/symantec-acquires-hilgraeve-patent/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/08/

No more Mr Nice Guy: UK gets tough on hi-tech criminals

Welsh virus-writer shown justice, not mercy
Welsh virus-writer shown justice, not mercy London’s Court of Appeal has turned down Welsh virus writer Simon Vallor’s appeal to shorten his two-year custodial sentence. Vallor,… https://www.virusbulletin.com/blog/2003/08/no-more-mr-nice-guy-uk-gets-tough-hi-tech-criminals/

July

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/07/

Canadian retreat

Ontario plays host to VB2003 and NTBugtraq Retreat.
Ontario plays host to VB2003 and NTBugtraq Retreat. This year's Virus Bulletin conference programme covers a wide range of subjects - from the detailed analysis of emerging… https://www.virusbulletin.com/blog/2003/07/canadian-retreat/

The big wait

Will Microsoft's second attempt at entering the anti-virus field result in the 'vast shake-up' of the AV industry that was expected last time?
Will Microsoft's second attempt at entering the anti-virus field result in the 'vast shake-up' of the AV industry that was expected last time? The big news in June was the… https://www.virusbulletin.com/blog/2003/07/big-wait/

School without thought - your thoughts

Your thoughts on the University of Calgary's proposals to teach virus writing in its course on computer viruses and malware.
Your thoughts on the University of Calgary's proposals to teach virus writing in its course on computer viruses and malware.Recently VB reported on the University of Calgary's… https://www.virusbulletin.com/blog/2003/06/school-without-thought-your-thoughts/

Microsoft buys into AV

Microsoft announces acquisition of anti-virus technology.
Microsoft announces acquisition of anti-virus technology.Microsoft has announced the acquisition of anti-virus technology from Romanian AV manufacturer GeCAD Software.The… https://www.virusbulletin.com/blog/2003/06/microsoft-buys-av/

June

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/06/

School without thought

University course teaches students to write malware.
University course teaches students to write malware. The University of Calgary has announced very proudly on its website that a new undergraduate course will 'focus on developing… https://www.virusbulletin.com/blog/2003/06/school-without-thought/

Military intelligence

US Army gets serious about anti-virus.
US Army gets serious about anti-virus. The US Army is using products supplied by Trend Micro to protect users of its Army Knowledge Online service from viruses, malicious content… https://www.virusbulletin.com/blog/2003/04/military-intelligence/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.