VB Blog

First sponsors of VB2017 announced

Posted by   Martijn Grooten on   Mar 6, 2017

We are excited to announce the first five sponsors of VB2017, companies based in Europe, Asia and North America.

Read more  

Security products and HTTPS: let's do it better

Posted by   Martijn Grooten on   Feb 27, 2017

A recent paper showed that many HTTPS-intercepting security solutions have implemented TLS rather poorly. Does that mean we should avoid such solutions altogether?

Read more  

The SHA-1 hashing algorithm has been 'shattered'

Posted by   Martijn Grooten on   Feb 23, 2017

Researchers from Google and CWI Amsterdam have created the first known collision of the SHA-1 hashing algorithm, making a very strong case to ditch it.

Read more  

Throwback Thursday: Once a researcher...

Posted by   Helen Martin on   Feb 23, 2017

VB was saddened to learn this week of the passing of one of the pioneers of the AV industry, Ross Greenberg. This Throwback Thursday we look back at an interview with Ross in November 1995.

Read more  

VB2017: What is happening in the threat landscape and what are we doing against it? Submit a proposal in the VB2017 CFP!

Posted by   Martijn Grooten on   Feb 20, 2017

Have you analysed a new online threat? Do you know a new way to defend against such threats? Then submit an abstract in the CFP for VB2017!

Read more  

VB2016 paper: APT reports and OPSEC evolution, or: these are not the APT reports you are looking for

Posted by   Martijn Grooten on   Feb 17, 2017

APT reports are great for gaining an understanding of how advanced attack groups operate - however, they can also provide free QA for the threat actors. Today, we publish a VB2016 paper by Gadi Evron (Cymmetria) and Inbar Raz (Perimeter X), who discuss what they think is wrong with many APT reports and what can be done to improve them.

Read more  

Security for your ears: recommended infosec podcasts

Posted by   Martijn Grooten on   Feb 14, 2017

Industry veteran Mikko Hyppönen recently urged would-be security researchers to ditch their favourite pop music and listen to security podcasts on their commute to work instead. Virus Bulletin Editor Martijn Grooten shares his favourite security podcasts.

Read more  

VB2016 video: Getting duped: piggybacking on webcam streams for surreptitious recordings

Posted by   Martijn Grooten on   Feb 10, 2017

In a presentation at VB2016, Patrick Wardle, Director of Research at Synack, discussed the possibilities of Mac malware recording the user via the webcam. Today, we publish the video of Patrick's presentation.

Read more  

We shouldn't forget those most vulnerable in our digital world

Posted by   Martijn Grooten on   Feb 9, 2017

Virus Bulletin Editor Martijn Grooten calls for the security community not to forget those most vulnerable in the digital world, including political activists living under oppressive regimes, and victims of abuse.

Read more  

Throwback Thursday: A troubled world

Posted by   Helen Martin on   Feb 9, 2017

In early 1991, the world was a troubled place and conflict and violence were being reported globally on a daily basis. With this as a backdrop, the world of "indiscriminate" computer viruses which "victimise in a random and unpredictable manner" seemed relatively trivial to then Editor of VB, Edward Wilding.

Read more  

Search blog

New OpenOffice proof-of-concept widely noted

Odd payload, not spreading danger, brings attention to cross-platform worm.
Odd payload, not spreading danger, brings attention to cross-platform worm. A new proof-of-concept malware exploiting the OpenOffice document format has made headlines across the… https://www.virusbulletin.com/blog/2007/05/new-openoffice-proof-concept-widely-noted/

Norton FP trashes Chinese systems

Vital DLLs flagged as malware disable Windows XP across China.
Vital DLLs flagged as malware disable Windows XP across China. A serious false positive, caused by an erroneous update to Symantec's Norton Anti-virus product range issued late… https://www.virusbulletin.com/blog/2007/05/norton-fp-trashes-chinese-systems/

Zango sues PC Tools for $35 million

'Reformed' adware shippers upset by detection and removal.
'Reformed' adware shippers upset by detection and removal. Adware and sometime spyware maker Zango has brought a suit against anti-spyware firm PC Tools complaining that the… https://www.virusbulletin.com/blog/2007/05/zango-sues-pc-tools-35-million/

New spam-fighting system for France

Junk mail blacklisting project goes live.
Junk mail blacklisting project goes live. A group of public bodies and private companies have joined forces to implement a new system allowing French email users to report spam… https://www.virusbulletin.com/blog/2007/05/new-spam-fighting-system-france/

Estonian websites suffer wave of DoS attacks

Baltic republic accuses Russia of cyber-warfare.
Baltic republic accuses Russia of cyber-warfare. A wave of denial of service (DoS) attacks on Estonian websites has prompted the Estonian government to accuse its neighbour of… https://www.virusbulletin.com/blog/2007/05/estonian-websites-suffer-wave-dos-attacks/

Symantec files 8 piracy suits

Symantec pursues distributors of counterfeit software.
Symantec pursues distributors of counterfeit software.Symantec has revealed that it has filed civil lawsuits against eight US and Canadian companies accused of selling counterfeit… https://www.virusbulletin.com/blog/2007/05/symantec-files-8-piracy-suits/

Verizon acquires Cybertrust

ICSA Labs parent company subsumed.
ICSA Labs parent company subsumed.Verizon Business, a division of Verizon Communications has announced that it is set to acquire managed security services supplier Cybertrust. The… https://www.virusbulletin.com/blog/2007/05/verizon-acquires-cybertrust/

Latest flaws affect AV giants

Symantec, McAfee and CA all patch vulnerabilities.
Symantec, McAfee and CA all patch vulnerabilities. Three of the biggest names in the security sector, McAfee, Symantec and CA, have all revealed details of flaws in their software… https://www.virusbulletin.com/blog/2007/05/latest-flaws-affect-av-giants/

Phishing techniques and technology revealed

Serious software used to analyse phished data, and a phisher talks.
Serious software used to analyse phished data, and a phisher talks. Some insights into the workings of phishing scams were revealed this week, as a sophisticated tool designed to… https://www.virusbulletin.com/blog/2007/05/phishing-techniques-and-technology-revealed/

1.4 million Chinese infected over holiday week

May vacations bring trojan avalanche for gamers and filesharers.
May vacations bring trojan avalanche for gamers and filesharers. Chinese computers, in heavy use with many people off work for the Labour Day holiday week, have suffered a major… https://www.virusbulletin.com/blog/2007/05/1-4-million-chinese-infected-over-holiday-week/

Five ISPs hosting a third of malware, says study

StopBadware survey finds small group of ISPs most to blame.
StopBadware survey finds small group of ISPs most to blame. In a recent study of almost 50,000 sites known to be hosting malware, five ISPs have been identified as repeat… https://www.virusbulletin.com/blog/2007/05/five-isps-hosting-third-malware-says-study/

ZOO archive issues hit security vendors

Errors handling rare format patched by four AV and anti-spam products.
Errors handling rare format patched by four AV and anti-spam products. A researcher has revealed details of flawed implementation of a somewhat archaic archive format, .zoo, which… https://www.virusbulletin.com/blog/2007/05/zoo-archive-issues-hit-security-vendors/

Phishing moves into more new areas

Surveys, phone lines, USB sticks and call girls the latest tactics for spammers and phishers.
Surveys, phone lines, USB sticks and call girls the latest tactics for spammers and phishers. The latest social-engineering methods being put to use by phishers show no let up in… https://www.virusbulletin.com/blog/2007/05/phishing-moves-more-new-areas/

7 critical flaws patched on Patch Tuesday

May Security Bulletin covers wide range of vulnerabilities.
May Security Bulletin covers wide range of vulnerabilities.Microsoft's latest 'Patch Tuesday' security bulletin included fixes for seven vulnerabilities, all rated 'Critical' and… https://www.virusbulletin.com/blog/2007/05/7-critical-flaws-patched-patch-tuesday/

I-SPY chases SPY-ACT through approval process

Second piece of US anti-spyware legislation given go-ahead.
Second piece of US anti-spyware legislation given go-ahead. With the 'Securely Protect Yourself Against Cyber Trespass Act' (aka SPY-ACT act) approved by a House of Representatives… https://www.virusbulletin.com/blog/2007/05/i-spy-chases-spy-act-through-approval-process/

Questionable false positive file removed

Amendment to VB's April Linux comparative review.
Amendment to VB's April Linux comparative review. In Virus Bulletin's April 2007 Linux comparative review (see VB, April 2007, p.11), VB reported that ESET's product NOD32 had… https://www.virusbulletin.com/blog/2007/05/questionable-false-positive-file-removed/

Microsoft to beat Symantec to corporate release punch

With Forefront due out soon, Symantec's latest release suffers further delay.
With Forefront due out soon, Symantec's latest release suffers further delay.Microsoft has announced the release to manufacture of Forefront Client, the corporate implementation of… https://www.virusbulletin.com/blog/2007/05/microsoft-beat-symantec-corporate-release-punch/

Law to stop spam reaching kids dubbed a failure

Utah registry to protect children's email leaks cash and addresses.
Utah registry to protect children's email leaks cash and addresses. A law enacted in the state of Utah, as well as some other states, with the aim of preventing spammers from… https://www.virusbulletin.com/blog/2007/05/law-stop-spam-reaching-kids-dubbed-failure/

Botnet DoS no longer profitable

Extortion attacks fall as herders find easier money elsewhere.
Extortion attacks fall as herders find easier money elsewhere. The use of armies of botnets to carry out denial-of-service attacks on lucrative websites, as a method of extorting… https://www.virusbulletin.com/blog/2007/05/botnet-dos-no-longer-profitable/

Touchy mail blocker upsets Gay

Content filter berates woman for using own name in mails.
Content filter berates woman for using own name in mails. A woman has complained to the New Zealand ISP Telecom after an email she sent them was bounced back to her, with a message… https://www.virusbulletin.com/blog/2007/05/touchy-mail-blocker-upsets-gay/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.