VB Blog

VB2018 paper: Fake News, Inc.

Posted by   Helen Martin on   Apr 25, 2019

A former reporter by profession, Andrew Brandt's curiosity was piqued when he came across what appeared at first glance to be the website of a small-town newspaper based in Illinois, but under scrutiny, things didn’t add up. At VB2018 he presented a paper in which he shared the results of his investigation of the site. Today, we publish his paper and the recording of his presentation.

Read more  

Paper: Alternative communication channel over NTP

Posted by   Martijn Grooten on   Apr 24, 2019

In a new paper published today, independent researcher Nikolaos Tsapakis writes about the possibilities of malware using NTP as a covert communication channel and how to stop this.

Read more  

VB2019 conference programme announced

Posted by   Martijn Grooten on   Apr 5, 2019

VB is excited to reveal the details of an interesting and diverse programme for VB2019, the 29th Virus Bulletin International Conference, which takes place 2-4 October in London, UK.

Read more  

VB2018 paper: Under the hood - the automotive challenge

Posted by   Martijn Grooten on   Mar 27, 2019

Car hacking has become a hot subject in recent years, and at VB2018 in Montreal, Argus Cyber Security's Inbar Raz presented a paper that provides an introduction to the subject, looking at the complex problem, examples of car hacks, and the challenges ahead. Today, we publish both Inbar's paper and the recording of his presentation.

Read more  

VB2018 paper and video: Android app deobfuscation using static-dynamic cooperation

Posted by   Martijn Grooten on   Mar 20, 2019

Static analysis and dynamic analysis each have their shortcomings as methods for analysing potentially malicious files. Today, we publish a VB2018 paper by Check Point researchers Yoni Moses and Yaniv Mordekhay, in which they describe a method that combines static and dynamic analysis to defeat app obfuscation in Android binaries. We also publish the video of their presentation.

Read more  

VB2019 call for papers closes this weekend

Posted by   Martijn Grooten on   Mar 15, 2019

The call for papers for VB2019 closes on 17 March, and while we've already received many great submissions, we still want more!

Read more  

Registration open for VB2019 ─ book your ticket now!

Posted by   Martijn Grooten on   Mar 13, 2019

Registration for VB2019, the 29th Virus Bulletin International Conference, is now open, with an early bird rate available until 1 July.

Read more  

The VB2019 call for papers is about ... papers

Posted by   Martijn Grooten on   Mar 8, 2019

When we are calling for papers for the Virus Bulletin conference as we are doing now, we really mean a written paper. But don't worry if you've never written a paper - we can help!

Read more  

VB2018 video: Adware is just malware with a legal department - how we reverse engineered OSX/Pirrit, received legal threats, and survived

Posted by   Martijn Grooten on   Mar 8, 2019

Amit Serper first analysed the OSX/Pirrit adware in 2016, highlighting some of its malware-like techniques, and soon afterwards started receiving legal threats from the company behind it. At VB2018 Amit gave a presentation in which he discussed both the adware and the legal threats he received for calling it malware. Today, we publish the video of Amit's presentation.

Read more  

VB2018 paper: Anatomy of an attack: detecting and defeating CRASHOVERRIDE

Posted by   Martijn Grooten on   Mar 5, 2019

In December 2016, the CRASHOVERRIDE malware framework was used to cause a blackout in Ukraine. At VB2018 in Montreal, Dragos researcher Joe Slowik presented a detailed paper on the framework, explaining how the malware works and how it targets various protocols used to operate the electric grid. Today we publish both Joe's paper and the recording of his presentation.

Read more  

Search blog

VB2006 a resounding success - VB2007 dates revealed

As another VB conference comes to a close, dates for next year's conference are revealed.
As another VB conference comes to a close, dates for next year's conference are revealed. VB2006, which took place in Montréal last week has been declared a resounding success by… https://www.virusbulletin.com/blog/2006/10/resounding-success-dates-revealed/

McAfee stock scandal claims bosses

CEO leaves, president fired over financial problems.
CEO leaves, president fired over financial problems. Investigations into irregularities in McAfee's finances have led to the resignation of the company CEO and board chairman… https://www.virusbulletin.com/blog/2006/10/mcafee-stock-scandal-claims-bosses/

Met warns Haxdoor victims

Police notify 2,300 their details have been stolen.
Police notify 2,300 their details have been stolen. London's Metropolitan Police has contacted over 2,300 computer users to inform them that their details have been found on a… https://www.virusbulletin.com/blog/2006/10/met-warns-haxdoor-victims/

Domain name threat to Spamhaus

Anti-spam system at risk of losing identity.
Anti-spam system at risk of losing identity. The recent case in which a US court found anti-spam organisation Spamhaus guilty of mislabelling a company as spammers may take a… https://www.virusbulletin.com/blog/2006/10/domain-name-threat-spamhaus/

False false positives

BitDefender defends reputation, three more VB100% awards granted.
BitDefender defends reputation, three more VB100% awards granted. Since the publication of the recent VB100% results, several of the files from the clean test set causing false… https://www.virusbulletin.com/blog/2006/10/false-false-positives/

Hormel denied spam copyright

EU court rejects trademark dispute.
EU court rejects trademark dispute.Hormel Foods, maker of the SPAM pressed meat product, has lost a case brought before the European 'Office for Harmonization of Internal Markets'… https://www.virusbulletin.com/blog/2006/10/hormel-denied-spam-copyright/

Eight years for Russian DoS blackmailers

Extortion gang sentenced for gambling site attacks.
Extortion gang sentenced for gambling site attacks. A team of three found guilty of computer crimes and extortion have been sentenced to eight years imprisonment by a Russian… https://www.virusbulletin.com/blog/2006/10/eight-years-russian-dos-blackmailers/

Tesco to sell budget AV product

UK supermarket giant enters software market.
UK supermarket giant enters software market. The UK's largest supermarket chain, Tesco, has announced plans to sell and support its own-brand range of low-budget software products,… https://www.virusbulletin.com/blog/2006/10/tesco-sell-budget-av-product/

Stration worm building steadily

Mass-mailer evolving as botnets spread.
Mass-mailer evolving as botnets spread. The Stration mass-mailing worm, also called Warezov by some vendors, has been spreading steadily over the last few weeks, with the creators… https://www.virusbulletin.com/blog/2006/10/stration-worm-building-steadily/

McAfee joins Vista battle

Newspaper ad attacks Microsoft plans.
Newspaper ad attacks Microsoft plans.McAfee has joined Symantec on the warpath against Microsoft's plans for its forthcoming Vista release of Windows. In a full-page advertisement… https://www.virusbulletin.com/blog/2006/10/mcafee-joins-vista-battle/

Gmail slashes spam FPs

Hotmail lagging behind on mislabelled ham.
Hotmail lagging behind on mislabelled ham. 'Email marketing' firm Lyris has released a study of spam false positive filtering, showing a general downward trend in falsely blocked… https://www.virusbulletin.com/blog/2006/10/gmail-slashes-spam-fps/

Web community fights phishing

Vote-based anti-phish system launched.
Vote-based anti-phish system launched. A new database of phishing sites has been launched, with an open-source, community focus. The system, labelled PhishTank, is run by web firm… https://www.virusbulletin.com/blog/2006/10/web-community-fights-phishing/

Trend, McAfee vulnerabilities disclosed

ActiveX and ePO flaws covered by patches.
ActiveX and ePO flaws covered by patches.Trend Micro's flagship OfficeScan Corporate Edition 7.3 has suffered a vulnerability, allowing code execution from the local network. The… https://www.virusbulletin.com/blog/2006/10/trend-mcafee-vulnerabilities-disclosed/

NCSA launches security month

Watchdog kicks off awareness offensive.
Watchdog kicks off awareness offensive. US online safety organisation the National Cyber Security Alliance (NCSA) has launched its latest public information campaign, labelling… https://www.virusbulletin.com/blog/2006/10/ncsa-launches-security-month/

More spammers nabbed by Earthlink

ISP helps FBI track down spamming duo.
ISP helps FBI track down spamming duo. Two men pleaded guilty to spamming in a Miami court last week. The pair were accused of sending over 25,000 emails over a period of a month… https://www.virusbulletin.com/blog/2006/10/more-spammers-nabbed-earthlink/

IE punctured yet again

Newly patched browser vulnerable to more malware.
Newly patched browser vulnerable to more malware.Microsoft's beleaguered Internet Explorer browser is once again the subject of security worries, as another fully functioning… https://www.virusbulletin.com/blog/2006/10/ie-punctured-yet-again/

Phishers indicted

Six men charged with masterminding a phishing operation.
Six men charged with masterminding a phishing operation. Six US men have been indicted on charges of masterminding a phishing operation. According to the indictment, the six men… https://www.virusbulletin.com/blog/2006/10/phishers-indicted/

News round-up

September's goings on in the AV industry.
September's goings on in the AV industry. The top news stories of September were undoubtedly those concerning the VML vulnerability in Microsoft's Internet Explorer. Not only was… https://www.virusbulletin.com/blog/2006/10/news-round/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/10/

October issue of VB published

The October issue of Virus Bulletin is now available for subscribers to download.
The October issue of Virus Bulletin is now available for subscribers to download. The October 2006 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2006/10/october-issue-vb-published/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.