VB Blog

WordPress users urged to manually update to fix bug that prevents automatic updating

Posted by   Martijn Grooten on   Feb 8, 2018

Users of the popular WordPress content management system are urged to manually update their installation to version 4.9.4, as a bug in the previous version broke the ability to automatically install updates.

Read more  

New paper: A review of the evolution of Andromeda over the years

Posted by   Martijn Grooten on   Feb 7, 2018

The Andromeda botnet (aka Gamarue or Wauchos) has plagued Internet users for more than half a decade but, following a takedown effort and the arrest of the suspected botnet owner in December 2017, it is likely we have seen the end of it. In a new paper by Fortinet researchers Bahare Sabouri and He Xu, we look back at the evolution of Andromeda from version 2.06 to 2.10 and demonstrate both how it improved its loader to evade automatic analysis/detection and how the payload varied among the different versions.

Read more  

There is no evidence in-the-wild malware is using Meltdown or Spectre

Posted by   Martijn Grooten on   Feb 2, 2018

Reports of malware using the Meltdown or Spectre attacks are likely based on proof-of-concept code rather than files written for a malicious purpose.

Read more  

Throwback Thursday: Malware taking a bit(coin) more than we bargained for

Posted by   Martijn Grooten on   Feb 1, 2018

This Throwback Thursday, we republish the VB2012 paper by Microsoft researcher Amir Fouda, one of the earliest papers to look at malware targeting Bitcoin.

Read more  

First time speaker? Don't be afraid of submitting to the VB2018 CFP

Posted by   Martijn Grooten on   Jan 31, 2018

We especially encourage those less experienced in speaking in public to submit to the call for papers for VB2018, where we aim to provide a friendly and welcoming environment in which people can both present their own research and learn from what others have been working on.

Read more  

VB2017 paper: VirusTotal tips, tricks and myths

Posted by   Martijn Grooten on   Jan 25, 2018

At VB2017 in Madrid, security researcher Randy Abrams presented an overview of the VirusTotal service and then went on to bust several of the persistent myths that surround it. Today we publish both Randy's paper and the recording of his presentation.

Read more  

Healthcare CERTs highlight the need for security guidance for specific sectors

Posted by   Martijn Grooten on   Jan 24, 2018

A new computer emergency response team has been launched in the Netherlands to provide guidance specifically tailored to the healthcare sector. Martijn Grooten welcomes the development.

Read more  

VB2018 call for papers now open!

Posted by   Martijn Grooten on   Jan 23, 2018

Have you analysed a new online threat? Do you know a new way to defend against such threats? Are you tasked with securing systems and fending off attacks? The call for papers for VB2018 is now open and we want to hear from you!

Read more  

Book review: Serious Cryptography

Posted by   Martijn Grooten on   Jan 22, 2018

VB Editor Martijn Grooten recommends Jean-Philippe Aumasson's 'Serious Cryptography' as a very solid but practically focused introduction to cryptography.

Read more  

Necurs pump-and-dump spam campaign pushes obscure cryptocurrency

Posted by   Martijn Grooten on   Jan 16, 2018

A Necurs pump-and-dump spam campaign pushing the lesser known Swisscoin botnet is mostly background noise for the Internet.

Read more  

Search blog

Phishing techniques

Sorin Mustaca documents common and emerging phishing techniques.
Sorin Mustaca documents common and emerging phishing techniques. Despite the fact that phishing is receiving increasing amounts of media coverage, and people are more aware than… https://www.virusbulletin.com/blog/2007/03/phishing-techniques/

March

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2007/03/

UK watchdog body backs phishing victims

Consumer group Which? urges banks to protect customers scammed online.
Consumer group Which? urges banks to protect customers scammed online. Major UK consumer protection organisation Which? has issued a call for a change to rules regarding… https://www.virusbulletin.com/blog/2007/03/uk-watchdog-body-backs-phishing-victims/

News round-up

February's goings on in the anti-malware industry.
February's goings on in the anti-malware industry. Mobile security was something of a key theme last month, with a rash of new products released alongside updates to those… https://www.virusbulletin.com/blog/2007/03/news-round/

Cartoon trojan threatens P2P users

Illegal Japanese file-sharers warned off by anime character malware.
Illegal Japanese file-sharers warned off by anime character malware. A series of trojans have been spotted targeting users of popular Japanese file-sharing system Winny. The… https://www.virusbulletin.com/blog/2007/02/cartoon-trojan-threatens-p2p-users/

Trend troubled by further flaw

Second vulnerability unveiled this month only affects server products.
Second vulnerability unveiled this month only affects server products. Less than two weeks after details of a UPX vulnerability affecting many of Trend Micro's products were… https://www.virusbulletin.com/blog/2007/02/trend-troubled-further-flaw/

FTC criticised for low adware fine

Latest DirectRevenue case nets mere $1.5 million penalty.
Latest DirectRevenue case nets mere $1.5 million penalty. Serial adware user DirectRevenue, along with several advertising clients, has agreed to settle a case brought by the US… https://www.virusbulletin.com/blog/2007/02/ftc-criticised-low-adware-fine/

Fujacks writers arrested in first for China

Eight seized for writing and selling cuddly panda malware.
Eight seized for writing and selling cuddly panda malware. Eight men have been arrested in the central Chinese province of Hubei, on suspicion of involvement in the creation and… https://www.virusbulletin.com/blog/2007/02/fujacks-writers-arrested-first-china/

Trend hit by UPX vulnerability

Compression handling issue affects swathe of products.
Compression handling issue affects swathe of products. A wide range of Trend Micro security products are affected by a flaw in the handling of files compressed with UPX, which… https://www.virusbulletin.com/blog/2007/02/trend-hit-upx-vulnerability/

Massive attack on web root servers

Large-scale DDoS barrage hits top-level DNS machines.
Large-scale DDoS barrage hits top-level DNS machines. An exceptionally large Distributed Denial of Service (DDoS) attack took place yesterday, targeting the root DNS servers at the… https://www.virusbulletin.com/blog/2007/02/massive-attack-web-root-servers/

Popular sites carrying Javascript attacks

Superbowl stadium among many hosting malware attack.
Superbowl stadium among many hosting malware attack. Malicious Javascript has been planted on numerous legitimate websites over the weekend, attempting to take advantage of known… https://www.virusbulletin.com/blog/2007/02/popular-sites-carrying-javascript-attacks/

Major brands hit with adware fines

Landmark case blames advertisers for malware tactics.
Landmark case blames advertisers for malware tactics. Three major brands, Priceline, Travelocity and Cingular Wireless, have settled a New York lawsuit charging them with using… https://www.virusbulletin.com/blog/2007/02/major-brands-hit-adware-fines/

VB100 news

This month: new platform, new logo.
This month: new platform, new logo. With the overall conclusion that the release of Vista will make little difference to the overall malware landscape, VB chose this month to put… https://www.virusbulletin.com/blog/2007/02/news/

Upcoming events

Round up of this year's must-attend spam events.
Round up of this year's must-attend spam events. The 2007 Spam Conference will take place on 30 March 2007 at MIT, Cambridge, MA, USA. The title for this year's conference is… https://www.virusbulletin.com/blog/2007/02/upcoming-events/

Microsoft steals market share

Symantec and McAfee see drops in market share.
Symantec and McAfee see drops in market share. A report by analyst firm NPD Group has revealed that anti-malware heavyweights Symantec and McAfee both lost market share following… https://www.virusbulletin.com/blog/2007/02/microsoft-steals-market-share/

February

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2007/02/

Vista security concerns

'Dramatically more secure'... or not?
'Dramatically more secure'... or not? January saw the full commercial release of Microsoft's latest operating system: the long-awaited Vista. Since its release arguments have… https://www.virusbulletin.com/blog/2007/02/vista-security-concerns/

UK police 'can no longer cope' with e-crime

Report demands more resources and national IT squad.
Report demands more resources and national IT squad. A report issued by the Metropolitan Police has admitted that, despite serious under-reporting of computer-related crime… https://www.virusbulletin.com/blog/2007/01/uk-police-can-no-longer-cope-e-crime/

MySpace sues Spam King

Serial spammer faces more fines for abusing social system.
Serial spammer faces more fines for abusing social system. Regular spammer and lawsuit loser Scott Richter, last seen being sued by Infinite Monkeys, faces more legal and financial… https://www.virusbulletin.com/blog/2007/01/myspace-sues-spam-king/

Fujacks hype incenses analysts

Chinese reports of 'major threat' thought unlikely.
Chinese reports of 'major threat' thought unlikely. Reports in the Chinese Shanghai Daily of a 'five-star cyber worm' which could be 'one of the most devastating cyber worms ever… https://www.virusbulletin.com/blog/2007/01/fujacks-hype-incenses-analysts/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.