VB Blog

VB2019 paper: Fantastic Information and Where to Find it: A guidebook to open-source OT reconnaissance

Posted by   Martijn Grooten on   Nov 22, 2019

A VB2019 paper by FireEye researcher Daniel Kapellmann Zafra explained how open source intelligence (OSINT) can be used to learn crucial details of the inner workings of many a system. Today we publish Daniel's paper and the recording of his presentation.

Read more  

VB2019 paper: Different ways to cook a crab: GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

Posted by   Martijn Grooten on   Nov 21, 2019

Though active for not much longer than a year, GandCrab had been one of the most successful ransomware operations. In a paper presented at VB2019 in London, McAfee researchers John Fokker and Alexandre Mundo looked at the malware code, its evolution and the affiliate scheme behind it. Today we publish both their paper and the recording of their presentation.

Read more  

VB2019 paper: Domestic Kitten: an Iranian surveillance program

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, Check Point researchers Aseel Kayal and Lotem Finkelstein presented a paper detailing an Iranian operation they named 'Domestic Kitten' that used Android apps for targeted surveillance. Today we publish their paper and the video of their presentation.

Read more  

VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, LINE's HeungSoo Kang explained how cryptocurrency exchanges had been attacked using Firefox zero-days. Today, we publish the video of his presentation.

Read more  

VB2019 paper: DNS on fire

Posted by   Martijn Grooten on   Nov 7, 2019

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

Read more  

German Dridex spam campaign is unfashionably large

Posted by   Martijn Grooten on   Nov 6, 2019

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Read more  

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

Posted by   Martijn Grooten on   Nov 5, 2019

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

Read more  

Emotet continues to bypass many email security products

Posted by   Martijn Grooten on   Nov 4, 2019

Having returned from a summer hiatus, Emotet is back targeting inboxes and, as seen in the VBSpam test lab, doing a better job than most other malicious campaigns at bypassing email security products.

Read more  

VB2019 paper: We need to talk - opening a discussion about ethics in infosec

Posted by   Martijn Grooten on   Nov 1, 2019

Those working in the field of infosec are often faced with ethical dilemmas that are impossible to avoid. Today, we publish a VB2019 paper by Kaspersky researcher Ivan Kwiatkowski looking at ethics in infosec as well as the recording of Ivan's presentation.

Read more  

Stalkerware poses particular challenges to anti-virus products

Posted by   Martijn Grooten on   Oct 31, 2019

Malware used in domestic abuse situations is a growing threat, and the standard way for anti-virus products to handle such malware may not be good enough. But that doesn't mean there isn't an important role for anti-virus to play.

Read more  

Search blog

Same old, same old

Virus writers plead stupidity...
Virus writers plead stupidity... Just days after his creation made its first appearance in the Wild, the suspected author of the Iraqi war-themed W32/Ganda worm has been tracked… https://www.virusbulletin.com/blog/2003/04/same-old-same-old/

April

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/04/

Security in the classroom

Microsoft supporting secure code initiative at University of Leeds
Microsoft supporting secure code initiative at University of Leeds Microsoft seems to be taking security education seriously these days. The software company has pledged support -… https://www.virusbulletin.com/blog/2003/04/security-classroom/

Lighter sentences for virus writers?

A US report claims that sentences for computer-related crimes are too harsh.
A US report claims that sentences for computer-related crimes are too harsh. The USA's largest group of defence lawyers has backed a report claiming that sentences for… https://www.virusbulletin.com/blog/2003/03/lighter-sentences-virus-writers/

March

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/03/

Anti-virus for Lindows

Lindows teams up with Central Command to sell Linux anti-virus - a step in the right direction, but perhaps not far enough...
Lindows teams up with Central Command to sell Linux anti-virus - a step in the right direction, but perhaps not far enough... Of the Linux distributions, Lindows is possibly the… https://www.virusbulletin.com/blog/2003/02/anti-virus-lindows/

Symantec press release backfires

Watch out for your marketing department...
Watch out for your marketing department... It makes a change to be reporting on the under-hyping of a virus threat, rather than the usual story of anti-virus companies… https://www.virusbulletin.com/blog/2003/02/symantec-press-release-backfires/

VB2003 programme announced

Details of the VB2003 conference programme announced ...
Details of the VB2003 conference programme announced ... Details of the VB2003 conference programme have been announced and are available online.VB2003 will host more than 30… https://www.virusbulletin.com/blog/2003/02/programme-announced/

Calling all speakers

Submit your papers for VB2003 now!
Submit your papers for VB2003 now! Virus Bulletin has extended the deadline for submissions from those wishing to present at VB2003, the Thirteenth Virus Bulletin International… https://www.virusbulletin.com/blog/2003/02/calling-all-speakers/

Standing up for free speech

NAI lands itself a hefty fine...
NAI lands itself a hefty fine... Network Associates Inc. (NAI) has landed itself a hefty fine to start the new year after a New York court ruled against the company last month in… https://www.virusbulletin.com/blog/2003/02/standing-free-speech/

February

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2003/02/

Two years for three viruses

Author of Gokar, Redesi and Admirer jailed for two years.
Author of Gokar, Redesi and Admirer jailed for two years. Simon Vallor, a 22-year-old web designer from Wales, who pleaded guilty to creating and distributing a trio of… https://www.virusbulletin.com/blog/2003/02/two-years-three-viruses/

Virus writers get a helping hand

Two organizations send viruses to mailing list subscribers...
Two organizations send viruses to mailing list subscribers... Despite the recent conviction of Welsh Wiccan Simon Vallor, for writing and distributing three mass-mailing viruses,… https://www.virusbulletin.com/blog/2003/01/virus-writers-get-helping-hand/

W32/B(e)agle

VB predicts: 'Beagle's bark worse than its bite', 'Beware of Bagles in the morning', 'The Beagle has landed', ad nauseam.
VB predicts: 'Beagle's bark worse than its bite', 'Beware of Bagles in the morning', 'The Beagle has landed', ad nauseam. At first glance, W32/Bagle.A is not a particularly… https://www.virusbulletin.com/blog/2003/01/w32-b-e-agle/

News summary...

Trend estimates $5b virus damage in 2003, monoculture blues, Symantec 'reels from week of mishaps', more MiMail, and more...
Trend estimates $5b virus damage in 2003, monoculture blues, Symantec 'reels from week of mishaps', more MiMail, and more... Trend Micro kicks off today's news summary with an… https://www.virusbulletin.com/blog/2003/01/news-summary/

RIAA worm

RIAA allegedly buying worms to stop P2P piracy
RIAA allegedly buying worms to stop P2P piracy It would appear Gobbles Security has done it again, only this time under the guidance of everyone's favourite dark corporation, the… https://www.virusbulletin.com/blog/2003/01/riaa-worm/

Microsoft rights management

What digital and information rights management may mean for the industry.
What digital and information rights management may mean for the industry. Microsoft is frequently accused of being a hive of lax security, but the company has been very public… https://www.virusbulletin.com/blog/2003/01/microsoft-rights-management/

Anti anti anti

NAI buys DeerSoft Inc., manufacturer of SpamAssassin Pro - confusion assured ...
NAI buys DeerSoft Inc., manufacturer of SpamAssassin Pro - confusion assured ... In what seems certain to be a growing trend in the anti-virus industry, and following in the… https://www.virusbulletin.com/blog/2003/01/anti-anti-anti/

Lessons to be Learned

Proving that mistakes can happen to us all, it seems that W32/Winevar.A was not the only virus 'story' to have arisen from the AVAR 2002 conference in Korea.
Proving that mistakes can happen to us all, it seems that W32/Winevar.A was not the only virus 'story' to have arisen from the AVAR 2002 conference in Korea. It seems that… https://www.virusbulletin.com/blog/2003/01/lessons-be-learned/

A Happy New Year

In a cheery end-of-year message, mi2g has made ten security predictions for 2003.
In a cheery end-of-year message, mi2g has made ten security predictions for 2003. In a cheery end-of-year message, mi2g has made ten security predictions for 2003. Amongst… https://www.virusbulletin.com/blog/2003/01/happy-new-year/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.