VB Blog

VB2019 paper: Fantastic Information and Where to Find it: A guidebook to open-source OT reconnaissance

Posted by   Martijn Grooten on   Nov 22, 2019

A VB2019 paper by FireEye researcher Daniel Kapellmann Zafra explained how open source intelligence (OSINT) can be used to learn crucial details of the inner workings of many a system. Today we publish Daniel's paper and the recording of his presentation.

Read more  

VB2019 paper: Different ways to cook a crab: GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

Posted by   Martijn Grooten on   Nov 21, 2019

Though active for not much longer than a year, GandCrab had been one of the most successful ransomware operations. In a paper presented at VB2019 in London, McAfee researchers John Fokker and Alexandre Mundo looked at the malware code, its evolution and the affiliate scheme behind it. Today we publish both their paper and the recording of their presentation.

Read more  

VB2019 paper: Domestic Kitten: an Iranian surveillance program

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, Check Point researchers Aseel Kayal and Lotem Finkelstein presented a paper detailing an Iranian operation they named 'Domestic Kitten' that used Android apps for targeted surveillance. Today we publish their paper and the video of their presentation.

Read more  

VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, LINE's HeungSoo Kang explained how cryptocurrency exchanges had been attacked using Firefox zero-days. Today, we publish the video of his presentation.

Read more  

VB2019 paper: DNS on fire

Posted by   Martijn Grooten on   Nov 7, 2019

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

Read more  

German Dridex spam campaign is unfashionably large

Posted by   Martijn Grooten on   Nov 6, 2019

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Read more  

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

Posted by   Martijn Grooten on   Nov 5, 2019

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

Read more  

Emotet continues to bypass many email security products

Posted by   Martijn Grooten on   Nov 4, 2019

Having returned from a summer hiatus, Emotet is back targeting inboxes and, as seen in the VBSpam test lab, doing a better job than most other malicious campaigns at bypassing email security products.

Read more  

VB2019 paper: We need to talk - opening a discussion about ethics in infosec

Posted by   Martijn Grooten on   Nov 1, 2019

Those working in the field of infosec are often faced with ethical dilemmas that are impossible to avoid. Today, we publish a VB2019 paper by Kaspersky researcher Ivan Kwiatkowski looking at ethics in infosec as well as the recording of Ivan's presentation.

Read more  

Stalkerware poses particular challenges to anti-virus products

Posted by   Martijn Grooten on   Oct 31, 2019

Malware used in domestic abuse situations is a growing threat, and the standard way for anti-virus products to handle such malware may not be good enough. But that doesn't mean there isn't an important role for anti-virus to play.

Read more  

Search blog

Botnets becoming more robust

Zeus botnet used Amazon's in-the-cloud service to control bots.
Zeus botnet used Amazon's in-the-cloud service to control bots. New reports by MessageLabs and McAfee show that botherders have learned a lesson following the take-down of McColo… https://www.virusbulletin.com/blog/2009/12/botnets-becoming-more-robust/

Project Honey Pot 'celebrates' billionth spam message

Facebook about to become most phished organization.
Facebook about to become most phished organization. Few people would celebrate receiving a billion spam messages, but those at Project Honey Pot must have been a little proud when… https://www.virusbulletin.com/blog/2009/12/project-honey-pot-celebrates-billionth-spam-message/

Next VB100 comparative announced

SUSE test to challenge Linux products.
SUSE test to challenge Linux products. The latest round of VB100 testing has been announced, with a comparative to be run on Novell's SUSE Linux Enterprise Server 11 in January.… https://www.virusbulletin.com/blog/2009/12/next-comparative-announced/

False positive problem hits avast! users

Human failure blamed for faulty update.
Human failure blamed for faulty update. A relatively small subsection of the massive user base for Alwil's ever-popular avast! products were hit by a string of false positives last… https://www.virusbulletin.com/blog/2009/12/false-positive-problem-hits-avast-users/

IE zero-day bug fixed in Patch Tuesday updates

Serious browser bug main feature of monthly alerts, Adobe Flash issue also patched.
Serious browser bug main feature of monthly alerts, Adobe Flash issue also patched.Microsoft has released the December Patch Tuesday security bulletin, with a total of six alerts.… https://www.virusbulletin.com/blog/2009/12/ie-zero-day-bug-fixed-patch-tuesday-updates/

VB100 update

Post-test analysis corrects results for MS Forefront, CA.
Post-test analysis corrects results for MS Forefront, CA. In the wake of the mammoth VB100 comparative released earlier this week, the lab team have been conducting thorough… https://www.virusbulletin.com/blog/2009/12/update/

Legal success against notorious spammers

Atkinson to pay huge fine; Ralsky to spend years in prison.
Atkinson to pay huge fine; Ralsky to spend years in prison. US judges have sentenced two notorious spammers to a huge fine and years of imprisonment, respectively. Yesterday, a US… https://www.virusbulletin.com/blog/2009/12/legal-success-against-notorious-spammers/

December issue of VB published

The December issue of Virus Bulletin is now available for subscribers to download.
The December issue of Virus Bulletin is now available for subscribers to download. The December 2009 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2009/12/december-issue-vb-published/

December

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2009/12/

AV-Comparatives releases latest retrospective figures

Half of products rated top-class in proactive detection testing.
Half of products rated top-class in proactive detection testing. Independent testing lab AV-Comparatives has released its latest set of results, the semi-annual retrospective test… https://www.virusbulletin.com/blog/2009/11/av-comparatives-releases-latest-retrospective-figures/

VB calls for collaboration amongst anti-spam vendors

VB finds that, when it comes to spam filtering, a combined effort outperforms individual products.
VB finds that, when it comes to spam filtering, a combined effort outperforms individual products. Virus Bulletin has discovered that running several spam filters in combination… https://www.virusbulletin.com/blog/2009/11/vb-calls-collaboration-amongst-anti-spam-vendors/

ICSA Labs report reveals testing details

Certification issues unmasked in 20-year lab survey.
Certification issues unmasked in 20-year lab survey. Renowned testing and certification group ICSA Labs has released a fascinating report drawing back the curtain on its security… https://www.virusbulletin.com/blog/2009/11/icsa-labs-report-reveals-testing-details/

Fortinet announces IPO

Gateway specialist releases share price projections.
Gateway specialist releases share price projections. Security firm Fortinet has announced its floatation on the Nasdaq stock market, the first IT security company to launch an IPO… https://www.virusbulletin.com/blog/2009/11/fortinet-announces-ipo/

Anti-spam products do well in VB testing

VB announces anti-spam certification results.
VB announces anti-spam certification results.Virus Bulletin has announced that 12 products earned VBSpam awards in its latest round of comparative anti-spam testing. A total of 14… https://www.virusbulletin.com/blog/2009/11/anti-spam-products-do-well-vb-testing/

November issue of VB published

The November issue of Virus Bulletin is now available for subscribers to download.
The November issue of Virus Bulletin is now available for subscribers to download. The November 2009 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2009/11/november-issue-vb-published/

November

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2009/11/

AV-Comparatives publishes malware removal test

16 products challenged to remove selection of tricky infections.
16 products challenged to remove selection of tricky infections. Independent testing body AV-Comparatives has published its latest set of test results, a comparison of how well… https://www.virusbulletin.com/blog/2009/10/av-comparatives-publishes-malware-removal-test/

AMTSO members summit covers controversial issues

Expert body gets to grips with string of difficult subjects.
Expert body gets to grips with string of difficult subjects. A meeting of the Anti-Malware Testing Standards Organisation (AMTSO) took place this week, with leading experts from… https://www.virusbulletin.com/blog/2009/10/amtso-members-summit-covers-controversial-issues/

Bumper crop of October patch releases

Busy weeks for admins as Patch Tuesday joined by Adobe fixes, and Mozilla announces plug-in checking plans.
Busy weeks for admins as Patch Tuesday joined by Adobe fixes, and Mozilla announces plug-in checking plans. This week has seen Microsoft's monthly Patch Tuesday release of security… https://www.virusbulletin.com/blog/2009/10/bumper-crop-october-patch-releases/

VB announces next VB100 test on Windows 7

Deadline announced for first VB100 comparative on new operating system.
Deadline announced for first VB100 comparative on new operating system.VB has issued a call for submissions for the next VB100 comparative, to be run next month on Microsoft's… https://www.virusbulletin.com/blog/2009/10/vb-announces-next-test-windows-7/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.