VB Blog

First sponsors of VB2017 announced

Posted by   Martijn Grooten on   Mar 6, 2017

We are excited to announce the first five sponsors of VB2017, companies based in Europe, Asia and North America.

Read more  

Security products and HTTPS: let's do it better

Posted by   Martijn Grooten on   Feb 27, 2017

A recent paper showed that many HTTPS-intercepting security solutions have implemented TLS rather poorly. Does that mean we should avoid such solutions altogether?

Read more  

The SHA-1 hashing algorithm has been 'shattered'

Posted by   Martijn Grooten on   Feb 23, 2017

Researchers from Google and CWI Amsterdam have created the first known collision of the SHA-1 hashing algorithm, making a very strong case to ditch it.

Read more  

Throwback Thursday: Once a researcher...

Posted by   Helen Martin on   Feb 23, 2017

VB was saddened to learn this week of the passing of one of the pioneers of the AV industry, Ross Greenberg. This Throwback Thursday we look back at an interview with Ross in November 1995.

Read more  

VB2017: What is happening in the threat landscape and what are we doing against it? Submit a proposal in the VB2017 CFP!

Posted by   Martijn Grooten on   Feb 20, 2017

Have you analysed a new online threat? Do you know a new way to defend against such threats? Then submit an abstract in the CFP for VB2017!

Read more  

VB2016 paper: APT reports and OPSEC evolution, or: these are not the APT reports you are looking for

Posted by   Martijn Grooten on   Feb 17, 2017

APT reports are great for gaining an understanding of how advanced attack groups operate - however, they can also provide free QA for the threat actors. Today, we publish a VB2016 paper by Gadi Evron (Cymmetria) and Inbar Raz (Perimeter X), who discuss what they think is wrong with many APT reports and what can be done to improve them.

Read more  

Security for your ears: recommended infosec podcasts

Posted by   Martijn Grooten on   Feb 14, 2017

Industry veteran Mikko Hyppönen recently urged would-be security researchers to ditch their favourite pop music and listen to security podcasts on their commute to work instead. Virus Bulletin Editor Martijn Grooten shares his favourite security podcasts.

Read more  

VB2016 video: Getting duped: piggybacking on webcam streams for surreptitious recordings

Posted by   Martijn Grooten on   Feb 10, 2017

In a presentation at VB2016, Patrick Wardle, Director of Research at Synack, discussed the possibilities of Mac malware recording the user via the webcam. Today, we publish the video of Patrick's presentation.

Read more  

We shouldn't forget those most vulnerable in our digital world

Posted by   Martijn Grooten on   Feb 9, 2017

Virus Bulletin Editor Martijn Grooten calls for the security community not to forget those most vulnerable in the digital world, including political activists living under oppressive regimes, and victims of abuse.

Read more  

Throwback Thursday: A troubled world

Posted by   Helen Martin on   Feb 9, 2017

In early 1991, the world was a troubled place and conflict and violence were being reported globally on a daily basis. With this as a backdrop, the world of "indiscriminate" computer viruses which "victimise in a random and unpredictable manner" seemed relatively trivial to then Editor of VB, Edward Wilding.

Read more  

Search blog

Corporate mail spam drops Haxdoor

Business-related message carries trojan.
Business-related message carries trojan. A vaguely official-sounding email is being widely spammed, claiming to relate to some nebulous business activity between the sender and… https://www.virusbulletin.com/blog/2006/08/corporate-mail-spam-drops-haxdoor/

Phone companies' security shaken

As T-Mobile hacker is convicted, AT&T reveals break-in.
As T-Mobile hacker is convicted, AT&T reveals break-in. A 23-year-old Oregon resident has been sentenced to a year of 'home detention', after being convicted of hacking into the… https://www.virusbulletin.com/blog/2006/08/phone-companies-security-shaken/

BitDefender to join mobile market

AV firm releases phone security beta.
AV firm releases phone security beta.BitDefender has become the latest AV company to make a move into the mobile device market. It has released a beta of its mobile AV software,… https://www.virusbulletin.com/blog/2006/08/bitdefender-join-mobile-market/

iPod spam carries trojan

Fake sales invoice includes downloader.
Fake sales invoice includes downloader. A new spam campaign claiming to be information on an order for a new iPod is accompanied by a trojan which, when run, attempts to download… https://www.virusbulletin.com/blog/2006/08/ipod-spam-carries-trojan/

AOL 9.0 slated for suspect tactics

More badware accusations levelled at web giant.
More badware accusations levelled at web giant.StopBadware.org, the international anti-malware coalition backed by Google and Sun among others, has labelled AOL's current free… https://www.virusbulletin.com/blog/2006/08/aol-9-0-slated-suspect-tactics/

More ConsumerReports complaints

Testing organisation's methodology slammed again.
Testing organisation's methodology slammed again.ConsumerReports.org, the online wing of American consumers association Consumers Union, is once again taking flak for its testing… https://www.virusbulletin.com/blog/2006/08/more-consumerreports-complaints/

IBM invests in security, others may follow

Big Blue purchase sparks rumours of more mergers.
Big Blue purchase sparks rumours of more mergers. When massive cross-sector IT giant IBM bought Internet Security Systems for a rumoured $1.3 billion last week, it joined the list… https://www.virusbulletin.com/blog/2006/08/ibm-invests-security-others-may-follow/

Share dealers robbed, phishing suspected

Canadian stock-trading association warns of security breaches.
Canadian stock-trading association warns of security breaches. The Investment Dealers Association of Canada (IDA), a national regulatory organisation, has released an urgent press… https://www.virusbulletin.com/blog/2006/08/share-dealers-robbed-phishing-suspected/

Malware mostly crime-related, says Panda

Security firm reports 88% of new malware linked to cyber crime.
Security firm reports 88% of new malware linked to cyber crime. The labs of Spanish firm Panda Software have released a quarterly report, stating that criminal activity is behind… https://www.virusbulletin.com/blog/2006/08/malware-mostly-crime-related-says-panda/

Three years for botnet master

Zombie herder sentenced to 37 months behind bars.
Zombie herder sentenced to 37 months behind bars. A Californian 21-year-old has been sent to a federal prison in the US, after being convicted of computer fraud and computer damage… https://www.virusbulletin.com/blog/2006/08/three-years-botnet-master/

Phishing help for Yahoo! users

As phishing nets spread wider, Yahoo! announces defensive 'seal'.
As phishing nets spread wider, Yahoo! announces defensive 'seal'. Web giant Yahoo! has announced plans to introduce a new anti-phishing system to help protect its customers. The… https://www.virusbulletin.com/blog/2006/08/phishing-help-yahoo-users/

Rooting out malware

Sophos joins anti-rootkit market, others expected to follow soon.
Sophos joins anti-rootkit market, others expected to follow soon.Sophos has released a free anti-rootkit tool, available for download from its website. The UK-based company joins… https://www.virusbulletin.com/blog/2006/08/rooting-out-malware/

Child porn blackmail spam carries trojan

Spoof mail claims to come from anti-child porn site.
Spoof mail claims to come from anti-child porn site. A spam campaign claiming to come from child porn activists ASACP accuses recipients of visiting child porn sites, suggesting a… https://www.virusbulletin.com/blog/2006/08/child-porn-blackmail-spam-carries-trojan/

Trend and Microsoft deny vulnerability

PowerPoint zero-day hype just hype after all.
PowerPoint zero-day hype just hype after all. After an announcement from Trend Micro sparked numerous reports of a zero-day PowerPoint exploit, taking advantage of an… https://www.virusbulletin.com/blog/2006/08/trend-and-microsoft-deny-vulnerability/

Stock scam spam duo sued

Pump-and-dump couple face fines, as do many others worldwide.
Pump-and-dump couple face fines, as do many others worldwide. A Connecticut couple have been indicted over claims they used a spam campaign to artificially inflate stock prices. In… https://www.virusbulletin.com/blog/2006/08/stock-scam-spam-duo-sued/

AOL AV in adware alarm

Free product offered by AOL accused of potentially unwanted tactics.
Free product offered by AOL accused of potentially unwanted tactics. Recently released Active Virus Shield, the Kaspersky-based anti-virus product from web giant AOL, is coming… https://www.virusbulletin.com/blog/2006/08/aol-av-adware-alarm/

McAfee faces legal and financial woes

With books under scrutiny, McAfee is sued over property rights.
With books under scrutiny, McAfee is sued over property rights. As McAfee faces up to the likelihood of its financial results for the last five years being overturned following… https://www.virusbulletin.com/blog/2006/08/mcafee-faces-legal-and-financial-woes/

Phishers target more charities

Christian Aid warns supporters of bogus emails, while Katrina phishmaster is indicted.
Christian Aid warns supporters of bogus emails, while Katrina phishmaster is indicted. Church charity organisation Christian Aid has released a statement warning supporters to be… https://www.virusbulletin.com/blog/2006/08/phishers-target-more-charities/

Movie firm harasses users with spyware

Film download service accused of using spyware strongarm tactics.
Film download service accused of using spyware strongarm tactics. Washington state has brought an action against a firm called Movieland.com, after complaints that the company's… https://www.virusbulletin.com/blog/2006/08/movie-firm-harasses-users-spyware/

AOL digging for spammer's treasure

Web giant plans hunt for hidden spam gold.
Web giant plans hunt for hidden spam gold. ISP mammoth AOL has obtained a court judgement allowing it to dig up the land of a convicted spammer's family, in a search for a stash… https://www.virusbulletin.com/blog/2006/08/aol-digging-spammer-s-treasure/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.