VB Blog

VB2019 paper: Fantastic Information and Where to Find it: A guidebook to open-source OT reconnaissance

Posted by   Martijn Grooten on   Nov 22, 2019

A VB2019 paper by FireEye researcher Daniel Kapellmann Zafra explained how open source intelligence (OSINT) can be used to learn crucial details of the inner workings of many a system. Today we publish Daniel's paper and the recording of his presentation.

Read more  

VB2019 paper: Different ways to cook a crab: GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

Posted by   Martijn Grooten on   Nov 21, 2019

Though active for not much longer than a year, GandCrab had been one of the most successful ransomware operations. In a paper presented at VB2019 in London, McAfee researchers John Fokker and Alexandre Mundo looked at the malware code, its evolution and the affiliate scheme behind it. Today we publish both their paper and the recording of their presentation.

Read more  

VB2019 paper: Domestic Kitten: an Iranian surveillance program

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, Check Point researchers Aseel Kayal and Lotem Finkelstein presented a paper detailing an Iranian operation they named 'Domestic Kitten' that used Android apps for targeted surveillance. Today we publish their paper and the video of their presentation.

Read more  

VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, LINE's HeungSoo Kang explained how cryptocurrency exchanges had been attacked using Firefox zero-days. Today, we publish the video of his presentation.

Read more  

VB2019 paper: DNS on fire

Posted by   Martijn Grooten on   Nov 7, 2019

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

Read more  

German Dridex spam campaign is unfashionably large

Posted by   Martijn Grooten on   Nov 6, 2019

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Read more  

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

Posted by   Martijn Grooten on   Nov 5, 2019

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

Read more  

Emotet continues to bypass many email security products

Posted by   Martijn Grooten on   Nov 4, 2019

Having returned from a summer hiatus, Emotet is back targeting inboxes and, as seen in the VBSpam test lab, doing a better job than most other malicious campaigns at bypassing email security products.

Read more  

VB2019 paper: We need to talk - opening a discussion about ethics in infosec

Posted by   Martijn Grooten on   Nov 1, 2019

Those working in the field of infosec are often faced with ethical dilemmas that are impossible to avoid. Today, we publish a VB2019 paper by Kaspersky researcher Ivan Kwiatkowski looking at ethics in infosec as well as the recording of Ivan's presentation.

Read more  

Stalkerware poses particular challenges to anti-virus products

Posted by   Martijn Grooten on   Oct 31, 2019

Malware used in domestic abuse situations is a growing threat, and the standard way for anti-virus products to handle such malware may not be good enough. But that doesn't mean there isn't an important role for anti-virus to play.

Read more  

Search blog

New VB Spam Supplement

VB plans to present a selection of news and articles on spam and anti-spam techniques - some technical, some ethical, some relating to real-world experiences of dealing with spam.
VB plans to present a selection of news and articles on spam and anti-spam techniques - some technical, some ethical, some relating to real-world experiences of dealing with spam.… https://www.virusbulletin.com/blog/2003/11/new-vb-spam-supplement/

November

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/11/

Totally Toronto: VB2003

Helen Martin recounts the Virus Bulletin conference.
Helen Martin recounts the Virus Bulletin conference. full article Posted on 30 October 2003 by Virus Bulletin https://www.virusbulletin.com/blog/2003/10/totally-toronto/

Linux vs. Windows viruses: a rebuttal

Pete Sergeant responds to an article by a SecurityFocus columnist, which hints that Linux users really don't need to worry about viruses.
Pete Sergeant responds to an article by a SecurityFocus columnist, which hints that Linux users really don't need to worry about viruses. Regarding Linux vs. Windows Viruses:… https://www.virusbulletin.com/blog/2003/10/linux-vs-windows-viruses-rebuttal/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/10/

Four arrests and a congressional hearing

US Congress starts to take computer security seriously, four alleged malware writers arrested...
US Congress starts to take computer security seriously, four alleged malware writers arrested... A US Congressional hearing was held last month to discuss the current state of… https://www.virusbulletin.com/blog/2003/09/four-arrests-and-congressional-hearing/

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/09/

Youth faces arrest for Blaster variant

Teenager suspected of creating Blaster variant faces arrest.
Teenager suspected of creating Blaster variant faces arrest. An 18-year-old suspected of creating a variant of the Blaster worm is reported to be facing arrest today. The… https://www.virusbulletin.com/blog/2003/08/youth-faces-arrest-blaster-variant/

Watching and waiting for Sobig

On 22 August 2003 anti-virus experts and sysadmins worldwide waited to discover what events, if any, would unfold when Sobig.F began a synchronized attack.
On 22 August 2003 anti-virus experts and sysadmins worldwide waited to discover what events, if any, would unfold when Sobig.F began a synchronized attack. Anti-virus experts and… https://www.virusbulletin.com/blog/2003/08/watching-and-waiting-sobig/

Symantec acquires Hilgraeve patent

Symantec pays $62.5m for a software patent, considers litigation against infringing competitors.
Symantec pays $62.5m for a software patent, considers litigation against infringing competitors. Symantec announced yesterday it had paid $62.5m for the infamous US Patent No.… https://www.virusbulletin.com/blog/2003/08/symantec-acquires-hilgraeve-patent/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/08/

No more Mr Nice Guy: UK gets tough on hi-tech criminals

Welsh virus-writer shown justice, not mercy
Welsh virus-writer shown justice, not mercy London’s Court of Appeal has turned down Welsh virus writer Simon Vallor’s appeal to shorten his two-year custodial sentence. Vallor,… https://www.virusbulletin.com/blog/2003/08/no-more-mr-nice-guy-uk-gets-tough-hi-tech-criminals/

July

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/07/

Canadian retreat

Ontario plays host to VB2003 and NTBugtraq Retreat.
Ontario plays host to VB2003 and NTBugtraq Retreat. This year's Virus Bulletin conference programme covers a wide range of subjects - from the detailed analysis of emerging… https://www.virusbulletin.com/blog/2003/07/canadian-retreat/

The big wait

Will Microsoft's second attempt at entering the anti-virus field result in the 'vast shake-up' of the AV industry that was expected last time?
Will Microsoft's second attempt at entering the anti-virus field result in the 'vast shake-up' of the AV industry that was expected last time? The big news in June was the… https://www.virusbulletin.com/blog/2003/07/big-wait/

School without thought - your thoughts

Your thoughts on the University of Calgary's proposals to teach virus writing in its course on computer viruses and malware.
Your thoughts on the University of Calgary's proposals to teach virus writing in its course on computer viruses and malware.Recently VB reported on the University of Calgary's… https://www.virusbulletin.com/blog/2003/06/school-without-thought-your-thoughts/

Microsoft buys into AV

Microsoft announces acquisition of anti-virus technology.
Microsoft announces acquisition of anti-virus technology.Microsoft has announced the acquisition of anti-virus technology from Romanian AV manufacturer GeCAD Software.The… https://www.virusbulletin.com/blog/2003/06/microsoft-buys-av/

June

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/06/

School without thought

University course teaches students to write malware.
University course teaches students to write malware. The University of Calgary has announced very proudly on its website that a new undergraduate course will 'focus on developing… https://www.virusbulletin.com/blog/2003/06/school-without-thought/

Military intelligence

US Army gets serious about anti-virus.
US Army gets serious about anti-virus. The US Army is using products supplied by Trend Micro to protect users of its Army Knowledge Online service from viruses, malicious content… https://www.virusbulletin.com/blog/2003/04/military-intelligence/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.