VB Blog

VB2017 paper: Nine circles of Cerber

Posted by   Martijn Grooten on   Dec 15, 2017

Cerber is one of the major names in the world of ransomware, and last year, Check Point released a decryption service for the malware. Today, we publish a VB2017 paper by Check Point's Stanislav Skuratovich describing how the Cerber decryption tool worked; we have also uploaded the video of the presentation of this paper, by Or Eshed and Yaniv Balmas.

Read more  

Attack on Fox-IT shows how a DNS hijack can break multiple layers of security

Posted by   Martijn Grooten on   Dec 14, 2017

Dutch security firm Fox-IT deserves praise for being open about an attack on its client network. There are some important lessons to be learned about DNS security from its post-mortem.

Read more  

Throwback Thursday: BGP - from route hijacking to RPKI: how vulnerable is the Internet?

Posted by   Martijn Grooten on   Dec 14, 2017

For this week's Throwback Thursday, we look back at the video of a talk Level 3's Mike Benjamin gave at VB2016 in Denver, on BGP and BGP hijacks.

Read more  

Security Planner gives security advice based on your threat model

Posted by   Martijn Grooten on   Dec 13, 2017

Citizen Lab's Security Planner helps you improve your online safety, based on the specific threats you are facing.

Read more  

VB2017 video: Spora: the saga continues a.k.a. how to ruin your research in a week

Posted by   Martijn Grooten on   Dec 11, 2017

Today, we publish the video of the VB2017 presentation by Avast researcher Jakub Kroustek and his former colleague Előd Kironský, now at ESET, who told the story of Spora, one of of the most prominent ransomware families of 2017.

Read more  

VB2017 paper: Modern reconnaissance phase on APT – protection layer

Posted by   Martijn Grooten on   Dec 7, 2017

During recent research, Cisco Talos researchers observed the ways in which APT actors are evolving and how a reconnaissance phase is included in the infection vector in order to protect valuable zero-day exploits or malware frameworks. At VB2017 in Madrid, two of those researchers, Paul Rascagneres and Warren Mercer, presented a paper detailing five case studies that demonstrate how the infection vector is evolving. Today we publish both Paul and Warren's paper and the recording of their presentation.

Read more  

VB2017 paper: Peering into spam botnets

Posted by   Martijn Grooten on   Dec 1, 2017

At VB2017 in Madrid, CERT Poland researchers Maciej Kotowicz and Jarosław Jedynak presented a paper detailing their low-level analysis of five spam botnets. Today we publish their full paper.

Read more  

Throwback Thursday: Anti-malware testing undercover

Posted by   Martijn Grooten on   Nov 30, 2017

We look back at the VB2016 presentation by Righard Zwienenberg (ESET) and Luis Corrons (Panda Security), in which they discussed various issues relating to anti-malware testing.

Read more  

Virus Bulletin relaunches VB Security Jobs Market for both employers and job seekers

Posted by   Martijn Grooten on   Nov 30, 2017

As an independent body in the IT security industry, Virus Bulletin is in an ideal position to act as a global source of information both about jobs currently available in the field and about those candidates currently seeking to start or progress their career in the industry - which is why we have relaunched the VB Security Jobs Market.

Read more  

VB2017 paper: Offensive malware analysis: dissecting OSX/FruitFly.B via a custom C&C server

Posted by   Martijn Grooten on   Nov 29, 2017

At VB2017 in Madrid, macOS malware researcher Patrick Wardle presented the details of a specific piece of Mac malware, FruitFly, which he analysed through a custom C&C server - a technique that will also be of interest for researchers of malware on other platforms. Today we publish both Patrick's paper and the recording of his presentation.

Read more  

Search blog

October issue of VB published

The October issue of Virus Bulletin is now available for subscribers to download.
The October issue of Virus Bulletin is now available for subscribers to download. The October 2008 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2008/10/october-issue-vb-published/

McAfee to buy Secure Computing

Acquisition deal valued at $465m.
Acquisition deal valued at $465m.McAfee has announced its official agreement to purchase network security firm Secure Computing Corp. in a deal worth a whopping $465 million. The… https://www.virusbulletin.com/blog/2008/09/mcafee-buy-secure-computing/

Free speech argument overturns AOL spammer conviction

Virginia court upholds notorious Jaynes' right to express himself in bulk.
Virginia court upholds notorious Jaynes' right to express himself in bulk. Infamous AOL spammer Jeremy Jaynes, convicted of a massive spamming campaign targeting AOL users in 2004,… https://www.virusbulletin.com/blog/2008/09/free-speech-argument-overturns-aol-spammer-conviction/

Last-minute papers announced for VB2008

Schedule for hot-topic technical 'turbo' talks announced.
Schedule for hot-topic technical 'turbo' talks announced. VB has unveiled the schedule for a series of up-to-the-minute technical presentations at the VB2008 conference which takes… https://www.virusbulletin.com/blog/2008/09/last-minute-papers-announced/

Four critical updates in Patch Tuesday release

Monthly security update small but vital.
Monthly security update small but vital.Microsoft has released its monthly 'Patch Tuesday' batch of security updates, with only four items on the list but all of them marked… https://www.virusbulletin.com/blog/2008/09/four-critical-updates-patch-tuesday-release/

Tough weekend for AV giants as FPs and DNS issues hit

Trend false alert cripples users' systems, Sophos sites taken out by DNS mixup.
Trend false alert cripples users' systems, Sophos sites taken out by DNS mixup. Two of the larger security firms, Trend Micro and Sophos, had a busy weekend cleaning up after… https://www.virusbulletin.com/blog/2008/09/tough-weekend-av-giants-fps-and-dns-issues-hit/

Google shows off in-house browser beta

Open-source 'Chrome' promises security as well as efficiency.
Open-source 'Chrome' promises security as well as efficiency. Ever-expanding web giant Google has released an early version of its own browser, developed in house but under… https://www.virusbulletin.com/blog/2008/09/google-shows-house-browser-beta/

AV-Test release latest results

Major test of suite products completed
Major test of suite products completed Independent testing body AV-Test.org has released the results of a major comparative of suite products, with many vendors' 2009 editions… https://www.virusbulletin.com/blog/2008/09/av-test-release-latest-results/

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2008/09/

September issue of VB published

The September issue of Virus Bulletin is now available for subscribers to download.
The September issue of Virus Bulletin is now available for subscribers to download. The September 2008 issue of Virus Bulletin is now available for subscribers to browse online… https://www.virusbulletin.com/blog/2008/09/september-issue-vb-published/

Malware reaches space station

Autorun worm found on non-critical systems.
Autorun worm found on non-critical systems. US space agency NASA has confirmed reports that laptops in use on the international space station have been found to have been infected… https://www.virusbulletin.com/blog/2008/08/malware-reaches-space-station/

Best Western database hack exposes info on 8m customers

Hotel chain data heist latest in string of major security leaks.
Hotel chain data heist latest in string of major security leaks. The global hotel chain Best Western has had its network security breached, leading to full details of thousands of… https://www.virusbulletin.com/blog/2008/08/best-western-database-hack-exposes-info-8m-customers/

AMTSO releases draft guidelines for public comment

First major publication emerges from testing standards body.
First major publication emerges from testing standards body. The Anti-Malware Testing Standards Organization, the global body set up to improve and support the testing of security… https://www.virusbulletin.com/blog/2008/08/amtso-releases-draft-guidelines-public-comment/

Latest VB100 announced

September 2nd deadline set for Windows Server 2008 test
September 2nd deadline set for Windows Server 2008 testVB has issued a call for submissions for the latest VB100 comparative review, which will test the performance of products… https://www.virusbulletin.com/blog/2008/08/latest-announced/

Symantec to acquire PC Tools

Industry giant adds spyware specialist to growing portfolio.
Industry giant adds spyware specialist to growing portfolio. Security industry behemoth Symantec has announced the planned acquisition of PC Tools, the Australia-based company… https://www.virusbulletin.com/blog/2008/08/symantec-acquire-pc-tools/

Net threats cost US $8.5 billion in two years

Study measures scale of scamming and other web worries.
Study measures scale of scamming and other web worries. US consumer watchdog body Consumer Reports have released their annual 'State of the Net' study, finding a noticeable decline… https://www.virusbulletin.com/blog/2008/08/net-threats-cost-us-8-5-billion-two-years/

Malware writing teacher revives old rows

College instructor claims to be fighting industry monopoly.
College instructor claims to be fighting industry monopoly. As announced to much controversy last year, a course in computer security at Sonoma State University, California, is… https://www.virusbulletin.com/blog/2008/08/malware-writing-teacher-revives-old-rows/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2008/08/

McAfee buys data loss firm Reconnex

$46 million acquisition announced as strong profit report released.
$46 million acquisition announced as strong profit report released.McAfee has announced its official agreement to purchase privately owned data loss prevention firm Reconnex, in a… https://www.virusbulletin.com/blog/2008/08/mcafee-buys-data-loss-firm-reconnex/

DNS flaw exploitation danger growing

Slow patchers targeted by sophisticated attacks.
Slow patchers targeted by sophisticated attacks. The serious vulnerability in the implementation of DNS systems has been targeted by malicious attacks, as security watchers have… https://www.virusbulletin.com/blog/2008/08/dns-flaw-exploitation-danger-growing/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.