VB Blog

WordPress users urged to manually update to fix bug that prevents automatic updating

Posted by   Martijn Grooten on   Feb 8, 2018

Users of the popular WordPress content management system are urged to manually update their installation to version 4.9.4, as a bug in the previous version broke the ability to automatically install updates.

Read more  

New paper: A review of the evolution of Andromeda over the years

Posted by   Martijn Grooten on   Feb 7, 2018

The Andromeda botnet (aka Gamarue or Wauchos) has plagued Internet users for more than half a decade but, following a takedown effort and the arrest of the suspected botnet owner in December 2017, it is likely we have seen the end of it. In a new paper by Fortinet researchers Bahare Sabouri and He Xu, we look back at the evolution of Andromeda from version 2.06 to 2.10 and demonstrate both how it improved its loader to evade automatic analysis/detection and how the payload varied among the different versions.

Read more  

There is no evidence in-the-wild malware is using Meltdown or Spectre

Posted by   Martijn Grooten on   Feb 2, 2018

Reports of malware using the Meltdown or Spectre attacks are likely based on proof-of-concept code rather than files written for a malicious purpose.

Read more  

Throwback Thursday: Malware taking a bit(coin) more than we bargained for

Posted by   Martijn Grooten on   Feb 1, 2018

This Throwback Thursday, we republish the VB2012 paper by Microsoft researcher Amir Fouda, one of the earliest papers to look at malware targeting Bitcoin.

Read more  

First time speaker? Don't be afraid of submitting to the VB2018 CFP

Posted by   Martijn Grooten on   Jan 31, 2018

We especially encourage those less experienced in speaking in public to submit to the call for papers for VB2018, where we aim to provide a friendly and welcoming environment in which people can both present their own research and learn from what others have been working on.

Read more  

VB2017 paper: VirusTotal tips, tricks and myths

Posted by   Martijn Grooten on   Jan 25, 2018

At VB2017 in Madrid, security researcher Randy Abrams presented an overview of the VirusTotal service and then went on to bust several of the persistent myths that surround it. Today we publish both Randy's paper and the recording of his presentation.

Read more  

Healthcare CERTs highlight the need for security guidance for specific sectors

Posted by   Martijn Grooten on   Jan 24, 2018

A new computer emergency response team has been launched in the Netherlands to provide guidance specifically tailored to the healthcare sector. Martijn Grooten welcomes the development.

Read more  

VB2018 call for papers now open!

Posted by   Martijn Grooten on   Jan 23, 2018

Have you analysed a new online threat? Do you know a new way to defend against such threats? Are you tasked with securing systems and fending off attacks? The call for papers for VB2018 is now open and we want to hear from you!

Read more  

Book review: Serious Cryptography

Posted by   Martijn Grooten on   Jan 22, 2018

VB Editor Martijn Grooten recommends Jean-Philippe Aumasson's 'Serious Cryptography' as a very solid but practically focused introduction to cryptography.

Read more  

Necurs pump-and-dump spam campaign pushes obscure cryptocurrency

Posted by   Martijn Grooten on   Jan 16, 2018

A Necurs pump-and-dump spam campaign pushing the lesser known Swisscoin botnet is mostly background noise for the Internet.

Read more  

Search blog

More phishers and spammers face prison time

US, Dutch and Japanese police crack down on online bad guys.
US, Dutch and Japanese police crack down on online bad guys. Of a series of arrests and convictions this week, the most spectacular headlines centre on the potential 101-year… https://www.virusbulletin.com/blog/2007/01/more-phishers-and-spammers-face-prison-time/

Wide support for spyware teacher

Malware infestation alleged at root of porn conviction.
Malware infestation alleged at root of porn conviction. A Connecticut teacher, recently convicted of morals offences after her laptop displayed a range of pornographic sites to a… https://www.virusbulletin.com/blog/2007/01/wide-support-spyware-teacher/

MMS mobile phone exploit released

Buffer overflow vulnerability in MMS SMIL exploited.
Buffer overflow vulnerability in MMS SMIL exploited. Last month saw the publication of proof-of-concept code exploiting a vulnerability in the popular mobile phone Multimedia… https://www.virusbulletin.com/blog/2007/01/mms-mobile-phone-exploit-released/

UK anti-spam victory for Microsoft

Lawsuit won against UK spammer.
Lawsuit won against UK spammer. Microsoft has won a lawsuit against a spammer based in the UK. Microsoft launched legal proceedings against 37-year-old Paul Martin McDonald after… https://www.virusbulletin.com/blog/2007/01/uk-anti-spam-victory-microsoft/

January

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2007/01/

Sony rootkit settlement costs escalate

Use of hidden DRM software costs company $5.75m.
Use of hidden DRM software costs company $5.75m. Sony BMG Music Entertainment's ill-advised use of hidden digital rights management (DRM) software on its CDs in late 2005 has cost… https://www.virusbulletin.com/blog/2007/01/sony-rootkit-settlement-costs-escalate/

Government agencies take anti-phishing action

Spear-phishing awareness training and testing for staff.
Spear-phishing awareness training and testing for staff. Personnel working for the US Coast Guard have been ordered to take phishing awareness training, while other US government… https://www.virusbulletin.com/blog/2007/01/government-agencies-take-anti-phishing-action/

2007

Latest news from the anti-virus industry provided by independent anti-virus advisors, Virus Bulletin
NewsMagic lanterns shine at terroristsVirus Bulletin finds 40% of users think governments should write viruses to bug terrorists.19 December 2007$3.2 billion lost in phishing… https://www.virusbulletin.com/blog/2007/

'Big Yellow' worm exploits slow Symantec patchers

Worm spotted targeting 6-month-old vulnerability in AV products.
Worm spotted targeting 6-month-old vulnerability in AV products. An alert has been issued by eEye Digital Security researchers for a new worm, which they have called 'Big Yellow',… https://www.virusbulletin.com/blog/2006/12/big-yellow-worm-exploits-slow-symantec-patchers/

UK taxman warns of rebate phish

Mails promising tax refund just another scam.
Mails promising tax refund just another scam.Her Majesty's Revenue and Customs (HMRC), the UK taxation authority, has issued a warning regarding a phishing campaign using its name.… https://www.virusbulletin.com/blog/2006/12/uk-taxman-warns-rebate-phish/

Microsoft wins block on spam list seller

Court bars bulk email address sales site from further business.
Court bars bulk email address sales site from further business.Microsoft has won a judgement against a UK man accused of selling lists of email addresses for the purpose of… https://www.virusbulletin.com/blog/2006/12/microsoft-wins-block-spam-list-seller/

BitDefender vulnerability disclosed

Details released of overflow issue reported and patched.
Details released of overflow issue reported and patched.BitDefender and several security-watching sites have unveiled details of a serious overflow vulnerability in the parsing of… https://www.virusbulletin.com/blog/2006/12/bitdefender-vulnerability-disclosed/

Yet more Word zero-day woes

Possible third vulnerability in popular software exploited.
Possible third vulnerability in popular software exploited. Reports are coming in of a new exploit for Microsoft's Word word processing software, amid speculation that the attack… https://www.virusbulletin.com/blog/2006/12/yet-more-word-zero-day-woes/

European mailer society signs spyware charter

Direct marketeers' association adopts code of good behaviour.
Direct marketeers' association adopts code of good behaviour. The Federation of European Direct and Interactive Marketing (FEDMA), a common-interest and self-regulatory body for… https://www.virusbulletin.com/blog/2006/12/european-mailer-society-signs-spyware-charter/

US Postal Service accused of spamming

Customer email campaign in breach of CAN-SPAM regulations.
Customer email campaign in breach of CAN-SPAM regulations. The US Postal Service (USPS) has come under fire from anti-spam activists after a mass email campaign promoting a new… https://www.virusbulletin.com/blog/2006/12/us-postal-service-accused-spamming/

UK phishing up 8000% in two years, says FSA

Government report shows massive rise in scams.
Government report shows massive rise in scams. A report presented to the UK government by the Financial Services Authority (FSA), the UK's financial watchdog organisation,… https://www.virusbulletin.com/blog/2006/12/uk-phishing-8000-two-years-says-fsa/

Putting a price on spam

Email-forwarding system lets users set a fee to let spam through.
Email-forwarding system lets users set a fee to let spam through. Email-forwarding system Boxbe has come up with a new way around the spam problem - by letting its users set a fee… https://www.virusbulletin.com/blog/2006/12/putting-price-spam/

Ransom attacks hit webmail

Accounts held hostage by data-stealing extortionists.
Accounts held hostage by data-stealing extortionists. Following the wave of 'ransomware' attacks first spotted in the summer of 2005, online extortionists have picked another… https://www.virusbulletin.com/blog/2006/12/ransom-attacks-hit-webmail/

Patch Tuesday leaves Word open to attack

Old and new zero-day vulnerabilities to remain unpatched.
Old and new zero-day vulnerabilities to remain unpatched.Microsoft's monthly Patch Tuesday update release sees seven security patches for Windows operating systems and products,… https://www.virusbulletin.com/blog/2006/12/patch-tuesday-leaves-word-open-attack/

Sophos vulnerabilities found, patched

Fixes issued for archive handling problems.
Fixes issued for archive handling problems. Researchers working with Tipping Point's Zero Day Initiative (ZDI) program have released details of two vulnerabilities in the Sophos… https://www.virusbulletin.com/blog/2006/12/sophos-vulnerabilities-found-patched/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.